MongoDB Inc MongoDB C Driver
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-4359 | < 2.2.3 | Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated buffer | LOW 2.0 | 0.2 % | ||
| CVE-2024-7553 | < 1.26.2 | Accessing Untrusted Directory May Allow Local Privilege Escalation | HIGH 7.8 | 0.3 % | ||
| CVE-2023-0437 | 1.0.0 – < 1.25.0 | MongoDB client C Driver may infinitely loop when validating certain BSON input data | HIGH 7.5 | 1.1 % | ||
| CVE-2021-32050 | 1.0.0 – < 1.17.7 | Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application | HIGH 7.5 | 0.6 % |