Skip to content
OpenAdvisories

Product · MongoDB

PHP Library

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-81525

    Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver

    The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into …

    MongoDB PHP Extension PHP Library php-mongodb Debian Ubuntu Packagist