Approved changes feed: RSS · Atom
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mongodb (1aa156a6-63a9-5032-baaf-10197d408a1e) |
|---|---|
| Product | Mongodb (fa9f1f9b-0cc9-5830-a189-b908276ac432) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/mongodb |
purl2cpe | 2026-06-01 10:11:17.751809 |
pkg:deb/ubuntu/mongodb |
purl2cpe | 2026-06-01 10:11:17.751811 |
pkg:github/mongodb/mongo |
purl2cpe | 2026-06-01 10:11:17.751812 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9754 |
vulnerable | 2026-07-29 01:12:09.630328 |
Stack memory disclosure in filemd5 command
MEDIUM (6.5)
An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command
Published: 2026-06-09T22:33:21.203Z
Updated: 2026-06-10T18:29:51.926Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11933 |
vulnerable | 2026-07-29 00:23:31.800595 |
Post-authentication use-after-free in server-side JavaScript BSON-to-array conversion
HIGH (8.8)
A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when converting BSON documents to JavaScript arrays. An authenticated user with read privileges who is able to run server-side JavaScript (for example, via $where or $function) can cause the server to access memory that has already been freed. This may result in disclosure of information from the mongod process memory or a denial of service through a server crash.
Published: 2026-06-12T01:57:32.014Z
Updated: 2026-06-13T03:55:46.393Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8336 |
vulnerable | 2026-06-08 08:08:58.293829 |
Post-authentication use-after-free error in $_internalJsEmit and mapreduce commands
HIGH (7.5)
After invoking $_internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a certain way, an authenticated user can subsequently crash mongod when the server-side JavaScript engine (through $where, $function, mapreduce reduce stage, etc.) is used also in a specific way, resulting in a post-authentication denial-of-service.
This issue impacts MongoDB Server v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.
Published: 2026-05-13T00:16:16.568Z
Updated: 2026-05-15T16:16:00.092Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8202 |
vulnerable | 2026-06-08 08:08:58.196781 |
Post-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators
MEDIUM (4.3)
Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim, an authenticated user with aggregation permissions can pin CPU utilization at 100% for an extended period of time.
This issue impacts MongoDB Server v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.
Published: 2026-05-13T00:19:41.441Z
Updated: 2026-05-13T01:38:09.751Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8201 |
vulnerable | 2026-06-08 08:08:58.196353 |
Use-After-Free in MongoDB FLE Query Analysis When Processing Positional Projections on Encrypted Fields
MEDIUM (6.4)
A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared. Triggering this vulnerability requires control over the structure of a client's FLE-related query.
This issue impacts MongoDB Server’s mongocryptd component v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.
Published: 2026-05-13T00:12:35.299Z
Updated: 2026-05-13T14:34:27.091Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8200 |
vulnerable | 2026-06-08 08:08:58.195775 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8199 |
vulnerable | 2026-06-08 08:08:58.195376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8053 |
vulnerable | 2026-06-08 08:08:58.034821 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1849 |
vulnerable | 2026-06-08 07:49:09.754568 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6707 |
vulnerable | 2026-06-08 07:43:16.035571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3085 |
vulnerable | 2026-06-08 07:23:08.074392 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3084 |
vulnerable | 2026-06-08 07:23:08.069131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3083 |
vulnerable | 2026-06-08 07:23:08.046026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3082 |
vulnerable | 2026-06-08 07:23:08.023762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14847 |
vulnerable | 2026-06-08 07:06:35.242349 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10061 |
vulnerable | 2026-06-08 07:02:26.235751 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8207 |
vulnerable | 2026-06-08 07:00:23.060125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7553 |
vulnerable | 2026-06-08 06:58:22.628789 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6375 |
vulnerable | 2026-06-08 06:58:18.834125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3374 |
vulnerable | 2026-06-08 06:41:53.081762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3372 |
vulnerable | 2026-06-08 06:41:53.078760 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1351 |
vulnerable | 2026-06-08 06:25:39.870946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10921 |
vulnerable | 2026-06-08 06:23:48.130685 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1409 |
vulnerable | 2026-06-08 05:52:35.792083 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24272 |
vulnerable | 2026-06-08 05:40:59.777122 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32040 |
vulnerable | 2026-06-08 05:31:54.645236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32037 |
vulnerable | 2026-06-08 05:31:54.640860 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32036 |
vulnerable | 2026-06-08 05:31:54.640197 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20333 |
vulnerable | 2026-06-08 05:29:09.020992 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20330 |
vulnerable | 2026-06-08 05:29:09.013117 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20326 |
vulnerable | 2026-06-08 05:29:09.002160 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7929 |
vulnerable | 2026-06-08 05:27:14.517687 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7928 |
vulnerable | 2026-06-08 05:27:14.517055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7926 |
vulnerable | 2026-06-08 05:27:14.513544 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7925 |
vulnerable | 2026-06-08 05:27:14.504966 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7923 |
vulnerable | 2026-06-08 05:27:14.500006 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7921 |
vulnerable | 2026-06-08 05:27:14.494809 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-2393 |
vulnerable | 2026-06-08 05:13:44.517404 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-2392 |
vulnerable | 2026-06-08 05:13:44.517022 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-2390 |
vulnerable | 2026-06-08 05:13:44.513736 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-2389 |
vulnerable | 2026-06-08 05:13:44.513209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-2386 |
vulnerable | 2026-06-08 05:13:44.503811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20925 |
vulnerable | 2026-06-08 05:13:41.773957 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20924 |
vulnerable | 2026-06-08 05:13:41.773543 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20923 |
vulnerable | 2026-06-08 05:13:41.772964 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25004 |
vulnerable | 2026-06-08 05:11:29.120301 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20805 |
vulnerable | 2026-06-08 05:11:27.970423 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20804 |
vulnerable | 2026-06-08 05:11:27.970054 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20803 |
vulnerable | 2026-06-08 05:11:27.969572 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20802 |
vulnerable | 2026-06-08 05:11:27.968987 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15535 |
vulnerable | 2026-06-08 05:08:58.906416 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6494 |
vulnerable | 2026-06-08 05:08:02.612821 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1609 |
vulnerable | 2026-06-08 05:06:25.926277 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8180 |
vulnerable | 2026-06-08 05:06:08.282272 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2132 |
vulnerable | 2026-06-08 05:03:58.531437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1892 |
vulnerable | 2026-06-08 05:03:57.096727 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6619 |
vulnerable | 2026-06-08 05:03:01.257767 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.