Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 22

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00138 Published 2026-10-08 Fixed in 1.30.13, 2.5.6 CWE-682
Priority LOW 25

An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer boundary.

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.00097 Published 2026-10-08 Fixed in 1.30.13, 2.5.6 CWE-787