Java Driver (Mongodb) - vulnerabilities (CVEs)

4 CVEs, 1 in the last 30 days, 249 known versions, newest CVE from 2026-10-28. Vendor: Mongodb.

CVEs of Java Driver

• CVE-2026-118581 - CVSS 6.9 (medium), 2026-10-28: A BSON encoding component of the MongoDB Java Driver does not verify that an externally supplied raw document's self-declared length agrees with the extent of…
• CVE-2026-88033 - CVSS 8.3 (high), 2026-09-10: Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied structured file…
• CVE-2026-88032 - CVSS 8.2 (high), 2026-09-10: A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected…
• CVE-2026-18710 - CVSS 8.2 (high), 2026-08-11: A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log…
• CVE-2021-20328 - CVSS 6.8 (medium), 2021-02-25: Specific versions of the Java driver that support client-side field level encryption (CSFLE) fail to perform correct host name verification on the KMS…