agentprime: mongodb-c-driverEvery new CVE for mongodb-c-driver.https://agentprime.io/CVE-2026-120954: Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector viewshttps://agentprime.io/advisories/CVE-2026-120954/https://agentprime.io/advisories/CVE-2026-120954/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 18:45:40 GMTCVECVE-2026-120955: MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS Metadatahttps://agentprime.io/advisories/CVE-2026-120955/https://agentprime.io/advisories/CVE-2026-120955/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 18:42:39 GMTCVECVE-2026-120956: remote abort and memory disclosure from a malformed cursor.nshttps://agentprime.io/advisories/CVE-2026-120956/https://agentprime.io/advisories/CVE-2026-120956/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 18:41:44 GMTCVECVE-2026-120684: MongoDB C Driver GridFS gap lets a shared writer recover a protected client's passwordhttps://agentprime.io/advisories/CVE-2026-120684/https://agentprime.io/advisories/CVE-2026-120684/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 18:40:42 GMTCVECVE-2026-120678: MongoDB C Driver leaks the decompressed reply buffer when an OP_COMPRESSED reply fails to parse (denial of service)https://agentprime.io/advisories/CVE-2026-120678/https://agentprime.io/advisories/CVE-2026-120678/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 18:39:32 GMTCVECVE-2026-114654: BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guardshttps://agentprime.io/advisories/CVE-2026-114654/https://agentprime.io/advisories/CVE-2026-114654/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:59 GMTCVECVE-2026-114653: Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builderhttps://agentprime.io/advisories/CVE-2026-114653/https://agentprime.io/advisories/CVE-2026-114653/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:58 GMTCVECVE-2026-114652: Update operator injection via single-element list rewriting in the update builderhttps://agentprime.io/advisories/CVE-2026-114652/https://agentprime.io/advisories/CVE-2026-114652/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:57 GMTCVECVE-2026-114651: Cross-document data leak via malformed BSON array parsing in reused thread bufferhttps://agentprime.io/advisories/CVE-2026-114651/https://agentprime.io/advisories/CVE-2026-114651/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:56 GMTCVECVE-2026-114650: Plaintext exposure of encrypted fields via ANSI code-page corruption of database namehttps://agentprime.io/advisories/CVE-2026-114650/https://agentprime.io/advisories/CVE-2026-114650/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:55 GMTCVECVE-2026-114649: Authentication bypass via issuer-and-serial-only certificate equality in shared cluster cachehttps://agentprime.io/advisories/CVE-2026-114649/https://agentprime.io/advisories/CVE-2026-114649/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:54 GMTCVECVE-2026-114648: NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keyshttps://agentprime.io/advisories/CVE-2026-114648/https://agentprime.io/advisories/CVE-2026-114648/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:53 GMTCVECVE-2026-114647: NoSQL operator injection via unvalidated replacement document in findOneAndReplacehttps://agentprime.io/advisories/CVE-2026-114647/https://agentprime.io/advisories/CVE-2026-114647/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:51 GMTCVECVE-2026-114646: NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wirehttps://agentprime.io/advisories/CVE-2026-114646/https://agentprime.io/advisories/CVE-2026-114646/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:50 GMTCVECVE-2026-114645: Heap overflow via 32-bit length wrap of the URI username in Windows Kerberos auth message wrappinghttps://agentprime.io/advisories/CVE-2026-114645/https://agentprime.io/advisories/CVE-2026-114645/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:49 GMTCVECVE-2026-114644: Memory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserializationhttps://agentprime.io/advisories/CVE-2026-114644/https://agentprime.io/advisories/CVE-2026-114644/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:48 GMTCVECVE-2026-114643: Duplicate geometry fields via unvalidated GeoJSON extra membershttps://agentprime.io/advisories/CVE-2026-114643/https://agentprime.io/advisories/CVE-2026-114643/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:47 GMTCVECVE-2026-106430: Query and rename target confusion via embedded NUL truncation in MongoDB C++ Driverhttps://agentprime.io/advisories/CVE-2026-106430/https://agentprime.io/advisories/CVE-2026-106430/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 18:45:56 GMTCVECVE-2026-106438: Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driverhttps://agentprime.io/advisories/CVE-2026-106438/https://agentprime.io/advisories/CVE-2026-106438/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 18:44:05 GMTCVECVE-2026-106437: Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driverhttps://agentprime.io/advisories/CVE-2026-106437/https://agentprime.io/advisories/CVE-2026-106437/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 18:42:14 GMTCVECVE-2026-106431: One-byte heap buffer overflow in BSON bulk document writer in MongoDB C Driverhttps://agentprime.io/advisories/CVE-2026-106431/https://agentprime.io/advisories/CVE-2026-106431/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 18:40:32 GMTCVECVE-2026-106428: Out-of-bounds read in SCRAM response parsing in MongoDB C Driverhttps://agentprime.io/advisories/CVE-2026-106428/https://agentprime.io/advisories/CVE-2026-106428/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 18:35:02 GMTCVECVE-2026-96746: Heap buffer overflow via mid-scan command list growth in client topology monitoringhttps://agentprime.io/advisories/CVE-2026-96746/https://agentprime.io/advisories/CVE-2026-96746/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 15:51:15 GMTCVECVE-2026-88036: GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driverhttps://agentprime.io/advisories/CVE-2026-88036/https://agentprime.io/advisories/CVE-2026-88036/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 18:09:10 GMTCVECVE-2026-88035: Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driverhttps://agentprime.io/advisories/CVE-2026-88035/https://agentprime.io/advisories/CVE-2026-88035/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 18:07:10 GMTCVECVE-2026-88034: GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C++ Driverhttps://agentprime.io/advisories/CVE-2026-88034/https://agentprime.io/advisories/CVE-2026-88034/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 18:05:31 GMTCVECVE-2026-88026: Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driverhttps://agentprime.io/advisories/CVE-2026-88026/https://agentprime.io/advisories/CVE-2026-88026/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 17:48:39 GMTCVECVE-2026-88025: GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# Driverhttps://agentprime.io/advisories/CVE-2026-88025/https://agentprime.io/advisories/CVE-2026-88025/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 17:46:43 GMTCVECVE-2026-84963: Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parserhttps://agentprime.io/advisories/CVE-2026-84963/https://agentprime.io/advisories/CVE-2026-84963/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 15:03:13 GMTCVECVE-2026-84964: Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS clienthttps://agentprime.io/advisories/CVE-2026-84964/https://agentprime.io/advisories/CVE-2026-84964/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 15:02:20 GMTCVECVE-2026-84965: Heap write primitive via size round-up wrap during JSON parsing on 32-bit buildshttps://agentprime.io/advisories/CVE-2026-84965/https://agentprime.io/advisories/CVE-2026-84965/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 15:01:21 GMTCVECVE-2026-84966: BSON element injection via NUL-embedded document keys in builder appendhttps://agentprime.io/advisories/CVE-2026-84966/https://agentprime.io/advisories/CVE-2026-84966/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 15:00:15 GMTCVECVE-2026-84969: Heap overflow via truncated base64 encoding of binary fields in length-limited JSON outputhttps://agentprime.io/advisories/CVE-2026-84969/https://agentprime.io/advisories/CVE-2026-84969/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 14:59:01 GMTCVECVE-2026-84970: Heap over-read or silent misparse via 32-bit truncation of JSON length in BSON JSON parserhttps://agentprime.io/advisories/CVE-2026-84970/https://agentprime.io/advisories/CVE-2026-84970/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 14:56:14 GMTCVECVE-2026-81530: KMS master key exposure via unredacted credential serialization in driver settings stringhttps://agentprime.io/advisories/CVE-2026-81530/https://agentprime.io/advisories/CVE-2026-81530/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 18:32:32 GMTCVECVE-2026-81529: Connection-option injection via unescaped settings in the canonical MongoDB URL builderhttps://agentprime.io/advisories/CVE-2026-81529/https://agentprime.io/advisories/CVE-2026-81529/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 18:32:31 GMTCVECVE-2026-81528: NoSQL injection via array replacement bypassing update shape validation in driver write pathhttps://agentprime.io/advisories/CVE-2026-81528/https://agentprime.io/advisories/CVE-2026-81528/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 18:32:30 GMTCVECVE-2026-81527: NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translationhttps://agentprime.io/advisories/CVE-2026-81527/https://agentprime.io/advisories/CVE-2026-81527/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 18:32:28 GMTCVECVE-2026-81524: Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driverhttps://agentprime.io/advisories/CVE-2026-81524/https://agentprime.io/advisories/CVE-2026-81524/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 18:32:25 GMTCVECVE-2026-81522: Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ Driverhttps://agentprime.io/advisories/CVE-2026-81522/https://agentprime.io/advisories/CVE-2026-81522/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Aug 2026 18:32:23 GMTCVE