CVE-2026-114643

The MongoDB C Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON members such as type and coordinates. An application that places user-supplied field names into these extra members can store documents with duplicate geometry fields, so the serve...

EUVD-2026-108303

The MongoDB C Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON members such as type and coordinates. An application that places user-supplied field names into these extra members can store documents with duplicate geometry fields, so the serve...

CVE-2026-114643

The MongoDB C# Driver is vulnerable to a collision issue where it writes GeoJSON extra members without verifying if their names conflict with reserved members like type or coordinates. If an application allows user-supplied field names in these extra members, it can result in documents with dupli...

CVE-2026-114643 Duplicate geometry fields via unvalidated GeoJSON extra members

The MongoDB C Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON members such as type and coordinates. An application that places user-supplied field names into these extra members can store documents with duplicate geometry fields, so the serve...