Skip to content
OpenAdvisories

Package · Ubuntu

mongo-java-driver

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-88032

    Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver

    A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operat…

    MongoDB Java Driver org.mongodb:mongodb-crypt Maven package org.mongodb:mongodb-driver-reactivestreams Maven package Debian Ubuntu
  • Medium 6.5
    CVE-2026-18710

    Cleartext Storage of Sensitive Information in MongoDB Driver Logging During Client Initialization

    A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext during routine client initialization. This occurs automatically as part of normal…

    MongoDB MongoDB Driver mongo-java-driver Ubuntu
  • Medium 6.4
    CVE-2021-20328

    MongoDB Java driver client-side field level encryption not verifying KMS host name

    Specific versions of the Java driver that support client-side field level encryption (CSFLE) fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attac…

    MongoDB MongoDB Driver mongo-java-driver mongodb-driver-legacy Ubuntu Maven