Rust Driver (Mongodb) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 83 known versions, newest CVE from 2026-09-10. Vendor: Mongodb.

CVEs of Rust Driver

• CVE-2026-88024 - CVSS 8.3 (high), 2026-09-10: Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can cause a caller-supplied structured file…
• CVE-2026-81526 - CVSS 7.1 (high), 2026-08-27: The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the…
• CVE-2025-11695 - CVSS 8 (high), 2025-10-13: When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to…
• CVE-2024-6382 - CVSS 7.5 (high), 2024-07-02: Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands. This may cause unexpected application…
• CVE-2021-20332 - CVSS 4.4 (medium), 2021-08-02: Specific MongoDB Rust Driver versions can include credentials used by the connection pool to authenticate connections in the monitoring event that is emitted…