CVE-2025-52385

CVE-2025-52385 Software : Studio 3T v.2025.1.0 Vulnerability Report : Studio 3T Remote Command Execution Overview A critical vulnerability in Studio 3T version 2025.1.0 and earlier allows a remote attacker to execute arbitrary code via a crafted payload exploiting the childprocess module in the...

[SECURITY] Fedora 43 Update: mongo-c-driver-1.30.9-1.fc43

mongo-c-driver is a client library written in C for MongoDB...

CVE-2026-81525

The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations...

CVE-2026-81525: Improper Neutralization of Special Elements in Data Query Logic

The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations...

CVE-2026-6691 MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow

The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...

[SECURITY] Fedora 42 Update: mongo-c-driver-1.30.7-2.fc42

mongo-c-driver is a client library written in C for MongoDB...

[SECURITY] Fedora 43 Update: mongo-c-driver-1.30.7-2.fc43

mongo-c-driver is a client library written in C for MongoDB...

[SECURITY] Fedora 44 Update: mongo-c-driver-1.30.7-2.fc44

mongo-c-driver is a client library written in C for MongoDB...

OESA-2026-1745 mongo-c-driver security update

mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: A mongocbulkoperationt may read invalid memory if large options a...

CVE-2026-20165

In Splunk Enterprise versions below 10.2.1, 10.0.4, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.7, 10.1.2507.17, 10.0.2503.12, and 9.3.2411.124, a low-privileged user that does not hold the "admin" or "power" Splunk roles could retrieve sensitive information by inspectin...

io.quarkus:quarkus-mailer (1.1.1.final), io.quarkus:quarkus-mailer-deployment (1.1.1.final) +17 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.1.1.final)

io.quarkus:quarkus-vertx MAVEN version 1.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 1.1.1.final - io.quarkus:quarkus-mailer-deployment 1.1.1.final -...

io.quarkus:quarkus-mailer (0.21.2), io.quarkus:quarkus-mailer-deployment (0.21.2) +15 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (0.21.2)

io.quarkus:quarkus-vertx MAVEN version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 0.21.2 - io.quarkus:quarkus-mailer-deployment 0.21.2 -...

io.quarkus:quarkus-mailer (1.3.3.final), io.quarkus:quarkus-mailer-deployment (1.3.3.final) +17 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.3.3.final)

io.quarkus:quarkus-vertx MAVEN version 1.3.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 1.3.3.final - io.quarkus:quarkus-mailer-deployment 1.3.3.final -...

io.quarkus:quarkus-mailer (1.3.2.final), io.quarkus:quarkus-mailer-deployment (1.3.2.final) +34 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.3.2.final)

io.quarkus:quarkus-vertx MAVEN version 1.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 1.3.2.final - io.quarkus:quarkus-mailer-deployment 1.3.2.final -...

io.quarkus:quarkus-mailer (0.23.0), io.quarkus:quarkus-mailer-deployment (0.23.0) +13 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (0.23.0)

io.quarkus:quarkus-vertx MAVEN version 0.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 0.23.0 - io.quarkus:quarkus-mailer-deployment 0.23.0 -...

io.quarkus:quarkus-mailer (0.25.0), io.quarkus:quarkus-mailer-deployment (0.25.0) +19 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (0.25.0)

io.quarkus:quarkus-vertx MAVEN version 0.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 0.25.0 - io.quarkus:quarkus-mailer-deployment 0.25.0 -...

io.quarkus:quarkus-mailer (1.1.0.cr1), io.quarkus:quarkus-mailer-deployment (1.1.0.cr1) +17 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.1.0.cr1)

io.quarkus:quarkus-vertx MAVEN version 1.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 1.1.0.cr1 - io.quarkus:quarkus-mailer-deployment 1.1.0.cr1 -...

io.quarkus:quarkus-mailer (1.3.0.alpha1), io.quarkus:quarkus-mailer-deployment (1.3.0.alpha1) +17 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (1.3.0.alpha1)

io.quarkus:quarkus-vertx MAVEN version 1.3.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 1.3.0.alpha1 - io.quarkus:quarkus-mailer-deployment 1.3.0.alpha1 -...

io.quarkus:quarkus-keycloak-authorization (0.28.1), io.quarkus:quarkus-keycloak-authorization-deployment (0.28.1) +21 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (0.28.1)

io.quarkus:quarkus-vertx MAVEN version 0.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-keycloak-authorization 0.28.1 - io.quarkus:quarkus-keycloak-authorization-deployment 0.28.1...

io.quarkus:quarkus-mailer (0.21.0), io.quarkus:quarkus-mailer-deployment (0.21.0) +15 more potentially affected by CVE-2025-49574 via io.quarkus:quarkus-vertx (0.21.0)

io.quarkus:quarkus-vertx MAVEN version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx and may be impacted: - io.quarkus:quarkus-mailer 0.21.0 - io.quarkus:quarkus-mailer-deployment 0.21.0 -...