134 matches found
ROOT-APP-NPM-GHSA-MH5C-679W-HH4R GHSA-mh5c-679w-hh4r in mongodb - Patched by Root
Root has patched GHSA-mh5c-679w-hh4r in the mongodb package for Root:npm. Multiple fixed versions available...
MongoDB 8.0.x < 8.0.28 Aggregation Command Invariant Assertion Failure (SERVER-128512)
The version of MongoDB installed on the remote host is 8.0.x prior to 8.0.28. It is, therefore, affected by a vulnerability: - An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of...
ROS-20260728-73-0006
The vulnerability in mongodb-org is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
CVE-2026-13066 Server-Side JavaScript DBPointer BSON Serialization Memory Disclosure
Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data returned to the client. This constitutes an unintended information disclosure affecting deployments that use server-sid...
CVE-2026-13078
A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit...
CLEANSTART-2026-NL92777 Security fixes for CVE-2026-42504 applied in versions: 7.0.34-r2
Security vulnerability affects the mongodb package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-UQ09292 Security fixes for CVE-2026-42504 applied in versions: 8.0.23-r2
Security vulnerability affects the mongodb package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-9743 Aggregation sub-pipeline null dereference may allow DoS via crafted getMore
In MongoDB Server 8.0, an aggregation stage can leave its subPipeline field null during processing of certain pipelines. If a getMore is subsequently issued on the same cursor, the server may dereference this null sub-pipeline when reattaching to the operation context, accessing an invalid addres...
MongoDB Server 日志信息泄露漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a vulnerability in MongoDB Server where log information may be leaked...
MongoDB Server 代码问题漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a code vulnerability in MongoDB Server, which stems from the 2dsphere...
MongoDB Server 安全漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which stems from...
MongoDB Server 安全漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which stems from the BSON...
The vulnerability of the bson_validate() function in the MongoDB database management system allows a hacker to trigger a service failure.
The vulnerability of the bsonvalidate function in the MongoDB database management system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
Linux Distros Unpatched Vulnerability : CVE-2026-8843
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Creating a 2dspherebucket index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that...
Linux Distros Unpatched Vulnerability : CVE-2026-8053
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memor...
Ubuntu 18.04 LTS / 20.04 LTS : MongoDB vulnerability (USN-8160-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8160-1 advisory. It was discovered that MongoDB incorrectly handled length parameters in zlib-compressed network messages prior to authentication. An unauthenticated...
The vulnerability of the MongoDB database management system, related to the unlimited distribution of resources, allows a hacker to cause a service failure.
The vulnerability of the MongoDB database management system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the MongoDB database management system, related to the unlimited distribution of resources, allows a hacker to cause a service failure.
The vulnerability of the MongoDB database management system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
MongoDB Server 安全漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which stems from a memory...