MongoDB Ruby Driver

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-880302.0.0 – 2.25.0GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby DriverMEDIUM 6.10.3 %