Ubuntu: Security Advisory (USN-8160-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MongoDB C Driver 安全漏洞

The MongoDB C Driver is an open-source client driver developed by MongoDB, designed to connect to and operate MongoDB databases in C-language programs. Versions of the MongoDB C Driver prior to 1.30.5, as well as 2.0.0 and 2.0.1, contain security vulnerabilities. These vulnerabilities stem from t...

Ubuntu 18.04 LTS / 20.04 LTS : MongoDB vulnerability (USN-8160-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8160-1 advisory. It was discovered that MongoDB incorrectly handled length parameters in zlib-compressed network messages prior to authentication. An unauthenticated...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: container-object-storage-interface-fips, step-issuer, tkn, victoriametrics-cluster-fips, nri-mssql, nova-fips, k8s-driver-manager-fips, zitadel, flux-image-reflector-controller-fips, q, argo-rollouts, cert-manager-google-cas-issuer-fips, cilium-certgen-fips, sbomqs,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: nri-mssql, supercronic, rancher-fleet-fips, rke2-runtime-fips, docker-machine-driver-linode, opensearch-k8s-operator, nri-haproxy, kubeflow-fips, prometheus-mysqld-exporter, sftpgo-plugin-geoipfilter, buildah-fips, apache-beam-java-sdk, quic-go, cinder-csi-plugin-fip...

CLEANSTART-2026-PE52216 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the mongodb package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-ZE36720 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the mongodb package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

USN-8160-1: MongoDB vulnerability

It was discovered that MongoDB incorrectly handled length parameters in zlib-compressed network messages prior to authentication. An unauthenticated remote attacker could possibly use this issue to cause MongoDB to allocate an oversized memory buffer, resulting in the exposure of sensitive...

USN-8160-1 mongodb vulnerability

It was discovered that MongoDB incorrectly handled length parameters in zlib-compressed network messages prior to authentication. An unauthenticated remote attacker could possibly use this issue to cause MongoDB to allocate an oversized memory buffer, resulting in the exposure of sensitive...

FreeBSD : MongoDB Server -- CWE-617: Reachable Assertion (a117f43b-2f7b-11f1-89f4-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a117f43b-2f7b-11f1-89f4-b42e991fc52e advisory. https://jira.mongodb.org/browse/SERVER-101758 reports: A user with access to the cluster with a limited...

Security Bulletin: Vulnerabilities in Linux Kernel, MongoDB and Tomcat affect IBM Spectrum Protect Plus

Summary IBM Spectrum Protect Plus can be affected by vulnerabilities in MongoDB, Tomcat and Linux. Vulnerabilities include obtaining sensitive information, causing a denial of service condition, the elevation of privileges, remote execution of arbitrary code and bypassing security restrictions, a...

Payload 跨站请求伪造漏洞

Payload is a headless CMS and application framework built using TypeScript, Node.js, React, and MongoDB. Versions of Payload prior to 3.79.1 contained a cross-site request forgeing vulnerability. This vulnerability arises from the cross-site request forgeing protection in the authentication...

PT-2026-29263

FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, FastGPT's MCP Model Context Protocol tools endpoints /api/core/app/mcpTools/getTools and /api/core/app/mcpTools/runTool accept a user-supplied URL parameter and make server-side HTTP requests to it without validating whether the...

Linux Distros Unpatched Vulnerability : CVE-2026-5170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window wh...

MongoDB Server 安全漏洞

MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. Vulnerabilities exist in versions of MongoDB Server prior to v8.2 8.2.2, v8.0...

MongoDB Server -- CWE-617: Reachable Assertion

https://jira.mongodb.org/browse/SERVER-101758 reports: A user with access to the cluster with a limited set of privilege actions can trigger a crash of amongod process during the limited and unpredictable window when the cluster is being promoted from a replica set to a sharded cluster. This may...

[SECURITY] Fedora 42 Update: mongo-c-driver-1.30.7-2.fc42

mongo-c-driver is a client library written in C for MongoDB...

[SECURITY] Fedora 43 Update: mongo-c-driver-1.30.7-2.fc43

mongo-c-driver is a client library written in C for MongoDB...

[SECURITY] Fedora 44 Update: mongo-c-driver-1.30.7-2.fc44

mongo-c-driver is a client library written in C for MongoDB...

OESA-2026-1746 mongo-c-driver security update

mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents. Security Fixes: A compromised third party cloud server or man-in-the-middle...