CVE-2026-9100

The MongoDB C Driver is vulnerable because its legacy GridFS API fails to perform adequate validation on file metadata received from the database. An attacker can use crafted documents within a GridFS collection to trigger a division-by-zero error, causing the application to crash, or an out-of-b...

CVE-2026-6231

The CVE-2026-6231 issue affects the MongoDB C Driver. The root cause is that the bson_validate function may return early on certain inputs and incorrectly report success, allowing malformed or invalid UTF-8 sequences to bypass validation and be processed incorrectly. Affected products/versions ex...