Skip to content
OpenAdvisories

Product · MongoDB

Rust Driver

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2026-88024

    GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Rust Driver

    Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authentica…

    MongoDB Rust Driver
  • High 8.0
    CVE-2025-11695

    Configuration may unexpectedly disable certificate validation

    When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5

    MongoDB Rust Driver mongodb crates.io