Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: MongoDB Server 7.0.31, 8.0.20, 8.2.6 Clear all filters
TI-2026-03794 CVE-2026-4358 · GHSA-64ph-qr47-qxh4

Memory safety issues in slot-based execution hash table spill

Priority LOW 27

A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash tab…

CVSS 4.0MEDIUM 6.1 Network Low privileges No interaction EPSS 0.00363 Published 2026-03-17 Fixed in 8.2.6, 8.0.20 +1 CWE-415
TI-2026-03595 CVE-2026-4147 · GHSA-65gf-rq85-48c5

Stack memory disclosure in filemd5 command

Priority LOW 31

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00228 Published 2026-03-17 Fixed in 8.2.6, 8.0.20 +1 CWE-457