Python Driver (Mongodb) - vulnerabilities (CVEs)

5 CVEs, 1 in the last 30 days, 207 known versions, newest CVE from 2026-10-08. Vendor: Mongodb.

CVEs of Python Driver

• CVE-2026-106435 - CVSS 5.9 (medium), 2026-10-08: The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression…
• CVE-2026-96749 - CVSS 8.4 (high), 2026-09-24: An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built…
• CVE-2026-96748 - CVSS 8.3 (high), 2026-09-24: PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an…
• CVE-2026-96747 - CVSS 5.3 (medium), 2026-09-24: The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain…
• CVE-2026-88029 - CVSS 8.3 (high), 2026-09-10: Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured…
• CVE-2024-5629 - CVSS 8.1 (high), 2024-06-05: An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception…