72912 matches found
UBUNTU-CVE-2026-81525
The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations...
EUVD-2026-67210
The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended...
EUVD-2026-67207
A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of...
CVE-2026-81523
A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of...
EUVD-2026-67206
A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may therefore have its operation directed at a different...
CVE-2026-4398
GitLab EE is affected by an authorization bypass on self-managed instances where an authenticated user could assign compliance frameworks from namespaces they were not authorized to access to their own project, due to missing namespace validation during framework assignment. Affected versions inc...
CVE-2026-47849 Spring Data REST allows mutation of identifier and version properties via JSON Patch
Spring Data REST does not guard identifier @Id and version @Version properties against mutation via RFC 6902 JSON Patch application/json-patch+json requests. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7....
CVE-2026-47849
Spring Data REST fails to protect @Id and @Version properties from mutation via RFC 6902 JSON Patch requests (content type application/json-patch+json). This allows an authenticated user to alter identifier and version fields, leading to high integrity impact (CVSS 3.1: 7.1, AV:N/AC:L/PR:L/UI:N/S...
PT-2026-82740
The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended...
PT-2026-82737
A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of...
ECHO-8F15-48F0-7FBD
Bulletin has no description...
ECHO-398F-BC47-55D2
Bulletin has no description...
ECHO-5CD0-844F-E9EB
Bulletin has no description...
ECHO-B02A-9509-4828
Bulletin has no description...
ECHO-961F-1EC5-51A7
Bulletin has no description...
ECHO-744A-B1B6-3B08
Bulletin has no description...
ECHO-29A1-0646-4AEF
Bulletin has no description...
ECHO-883A-A20E-E25B
Bulletin has no description...