MongoDB Go Driver
4 CVEs affecting MongoDB Go Driver. Latest disclosed: 2026-10-08. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-88031 | High | 8.1 | 2026-09-10 | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file id… |
CVE-2026-81521 | Medium | 6.5 | 2026-08-27 | The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping… |
CVE-2026-107325 | Medium | 5.9 | 2026-10-08 | Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray… |
CVE-2026-107324 | Medium | 5.9 | 2026-10-08 | An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON… |