Vulnerabilities

TI-2025-06093 CVE-2025-6710 · GHSA-p332-57gq-w6hx

Pre-authentication Denial of Service Stack Overflow Vulnerability in JSON Parsing via Excessive Recursion in MongoDB

LOW 39

MongoDB Server may be susceptible to stack overflow due to JSON parsing mechanism, where specifically crafted JSON inputs may induce unwarranted levels of recursion, resulting in excessive stack space consumption.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00378 Published 2025-06-26 Fixed in 6.0.21, 7.0.17 +1 CWE-674

TI-2025-06092 CVE-2025-6709 · GHSA-5cq2-33xv-h4mm

Pre-Authentication Denial of Service Vulnerability in MongoDB Server's OIDC Authentication

LOW 39

The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific date values in JSON input when using OIDC authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0051 Published 2025-06-26 Fixed in 7.0.17, 8.0.5 +1 CWE-20

Vulnerabilities

Filters

Pre-authentication Denial of Service Stack Overflow Vulnerability in JSON Parsing via Excessive Recursion in MongoDB

Pre-Authentication Denial of Service Vulnerability in MongoDB Server's OIDC Authentication