CVE-2026-115930

The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...

CVE-2026-115930 MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs

The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...

CVE-2026-115930

The MongoDB Shell (mongosh) is vulnerable in versions prior to 2.14.0 because its underlying Node.js runtime includes recoverable eMudhra intermediate CA certificates in its TLS root certificate store. This configuration could allow for improper certificate validation. Impacted users should updat...

EUVD-2026-109932

The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...

MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs

The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...

PT-2026-123348

The MongoDB Shell mongosh relies on Node.js as a third-party runtime that carries its own TLS root certificate store. This certificate store has the recoverable eMudhra intermediate CA certificates. This issue impacts MongoDB Shell mongosh versions prior to 2.14.0 and can be resolved by updating ...

CLEANSTART-2026-FG94911 Security fix for GHSA-8qq5-rm4j-mr97 applied in: mongosh 2.5.10-r5, mongosh 2.8.1-r0, renovate 43.4.4-r0, sqlpad 7.5.7-r0, thingsboard 4.2.1.1-r1, thingsboard-tb-web-ui 4.2.1.1-r1

GHSA-8qq5-rm4j-mr97 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WI35354 Security fix for GHSA-34x7-hfp2-rc4v applied in: mongosh 2.5.10-r5, mongosh 2.8.1-r0, renovate 43.4.4-r0, thingsboard-tb-web-ui 4.2.1.1-r2

GHSA-34x7-hfp2-rc4v affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VN06926 Security fix for GHSA-r6q2-hw4h-h46w applied in: mongosh 2.5.10-r5, mongosh 2.8.1-r0, renovate 43.4.4-r0, sqlpad 7.5.7-r0, thingsboard-tb-web-ui 4.2.1.1-r2

GHSA-r6q2-hw4h-h46w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AO87470 Security fix for GHSA-mh29-5h37-fv8m applied in: mongosh 2.8.1-r0, sqlpad 7.5.7-r0

GHSA-mh29-5h37-fv8m affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RV26689 Security fix for CVE-2026-24842 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, renovate 43.4.4-r0, sqlpad 7.5.7-r0, sqlpad 7.5.7-r1

CVE-2026-24842 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZI47888 Security fix for CVE-2026-23745 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, npm 11.7.0-r0, renovate 43.4.4-r0

CVE-2026-23745 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UO17156 Security fix for CVE-2026-23950 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, npm 11.7.0-r0, renovate 43.4.4-r0

CVE-2026-23950 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NN34341 Security fix for CVE-2026-26960 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, npm 11.10.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-26960 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IA47367 Security fix for GHSA-83g3-92jg-28cx applied in: mongosh 2.5.10-r5, mongosh 2.8.1-r0, npm 11.10.0-r2, opensearch-dashboards-fips 3.5.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0

GHSA-83g3-92jg-28cx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DZ05381 Security fix for GHSA-9ppj-qmqm-q256 applied in: mongosh 2.5.10-r5, mongosh 2.8.1-r0, opensearch-dashboards-fips 3.5.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0, sqlpad 7.5.7-r1

GHSA-9ppj-qmqm-q256 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NW62895 Security fix for CVE-2026-31802 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, npm 11.11.0-r2, renovate 43.4.3-r1, renovate 43.4.4-r0, sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-31802 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VD64269 Security fix for GHSA-qffp-2rhf-9h96 applied in: mongosh 2.5.10-r5, mongosh 2.8.1-r0, npm 11.11.0-r1, opensearch-dashboards-fips 3.5.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0, sqlpad 7.5.7-r1

GHSA-qffp-2rhf-9h96 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WV30852 Security fix for CVE-2026-29786 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, renovate 43.4.3-r1, renovate 43.4.4-r0, sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-29786 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NS67921 Security fix for CVE-2025-69873 applied in: argo-workflows 3.6.19-r8, mongosh 2.5.10-r5, mongosh 2.6.0-r4, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r2, renovate 43.4.3-r1, renovate 43.4.4-r0

CVE-2025-69873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...