Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: MongoDB Java Driver 5.11.1 Clear all filters
TI-2026-60058 CVE-2026-88033

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Java Driver

Priority LOW 28

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than…

CVSS 4.0MEDIUM 6.1 Network Low privileges No interaction EPSS 0.00455 Published 2026-09-10 Partial fix · 5.11.1 CWE-943
TI-2026-60057 CVE-2026-88032 · GHSA-38pq-38pp-9f4m

Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver

Priority LOW 35

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelle…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00257 Published 2026-09-10 Partial fix · 5.11.1 CWE-416