Advisories · Technology
MongoDB Go Driver.
Every CVE that names MongoDB Go Driver among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.2 High
Application denial of service via missing BSON array length validation in MongoDB Go Driver
- MongoDB Go Driver
- CWE-129
- CVSS 8.2 High
Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver
- MongoDB Go Driver
- Memory corruption
- CVSS 6.1 Medium
GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver
- MongoDB Go Driver
- Other injection
- CVSS 7.1 High
Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver
- MongoDB GO Driver
- CWE-99