Malicious code in mongodb-stitch-core-admin-client (npm)

The package mongodb-stitch-core-admin-client was found to contain malicious code...

Malicious code in mongodb-nightmare-private-passport (npm)

The package mongodb-nightmare-private-passport was found to contain malicious code...

Malicious code in titan-testcafe-registry-mongodb (npm)

The package titan-testcafe-registry-mongodb was found to contain malicious code...

Malicious code in cluster-xenobiology-inflation-mongodb (npm)

The package cluster-xenobiology-inflation-mongodb was found to contain malicious code...

Malicious code in whitedwarf-writable-mongodb-ophiuchus (npm)

The package whitedwarf-writable-mongodb-ophiuchus was found to contain malicious code...

Malicious code in express-websockets-sedna-mongodb (npm)

The package express-websockets-sedna-mongodb was found to contain malicious code...

MAL-2025-36973 Malicious code in titan-testcafe-registry-mongodb (npm)

The package titan-testcafe-registry-mongodb was found to contain malicious code...

MAL-2025-39247 Malicious code in whitedwarf-writable-mongodb-ophiuchus (npm)

The package whitedwarf-writable-mongodb-ophiuchus was found to contain malicious code...

MAL-2025-26637 Malicious code in mongodb-cressida-public-oberon (npm)

The package mongodb-cressida-public-oberon was found to contain malicious code...

MAL-2025-24135 Malicious code in jwt-mongodb-nestjs-gacrux (npm)

The package jwt-mongodb-nestjs-gacrux was found to contain malicious code...

MAL-2025-20089 Malicious code in express-websockets-sedna-mongodb (npm)

The package express-websockets-sedna-mongodb was found to contain malicious code...

MAL-2025-26635 Malicious code in mongodb-chatbot-eval (npm)

The package mongodb-chatbot-eval was found to contain malicious code...

MAL-2025-21265 Malicious code in generator-accelerate-mongodb (npm)

The package generator-accelerate-mongodb was found to contain malicious code...

MAL-2025-14655 Malicious code in apollo-mongodb-darkmatter-whitedwarf (npm)

The package apollo-mongodb-darkmatter-whitedwarf was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2025-6713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the...

ROS-20250806-09

A vulnerability in the MongoDB database management system server is related to excessive iteration. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service MongoDB database management system vulnerability is related to the fact that the software stor...

ROS-20250806-08

A vulnerability in the MongoDB database management system server is related to excessive iteration. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service MongoDB database management system vulnerability is related to the fact that the software stor...

MongoDB Compass Installed (Windows)

Binary data mongodbcompasswininstalled.nbin...

MongoDB 6.0.x < 6.0.21 / 7.0.x < 7.0.17 / 8.0.x < 8.0.5 Improper Validation (SERVER-106749)

The version of MongoDB installed on the remote host is 6.0 prior to 6.0.21, 7.0 prior to 7.0.17 and 8.0 prior to 8.0.5. It is, therefore, affected by a vulnerability as referenced in the SERVER-106749 advisory. - MongoDB Server may be susceptible to stack overflow due to JSON parsing mechanism,...

MongoDB 6.0.x < 6.0.21 / 7.0.x < 7.0.17 / 8.0.x < 8.0.5 DoS OIDC Authentication (SERVER-106748)

The version of MongoDB installed on the remote host is 6.0 prior to 6.0.21, 7.0 prior to 7.0.17 and 8.0 prior to 8.0.5. It is, therefore, affected by a vulnerability as referenced in the SERVER-106748 advisory. - The MongoDB Server is susceptible to a denial of service vulnerability due to improp...