GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C++ Driver

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# Driver

Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream

Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ Driver

MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow

Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows

Heap corruption via OCSP request double free from crafted multi-URL certificate in TLS client

bson_validate may skip validation when processing certain inputs

When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e

Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application

Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver

Under very specific circumstances (see Required configuration section below), a privileged user is able to cause arbitrary code to be executed which may cause further disruption…

Connection-option injection via unescaped settings in the canonical MongoDB URL builder

Heap memory out of bounds read and crash in C Driver legacy GridFS file reader

Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver

NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation

Heap over-read or silent misparse via 32-bit truncation of JSON length in BSON JSON parser

KMS master key exposure via unredacted credential serialization in driver settings string

Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver

Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds

BSON element injection via NUL-embedded document keys in builder append

bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values

NoSQL injection via array replacement bypassing update shape validation in driver write path

Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver

Integer Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer()

Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser

Specific versions of the MongoDB C# Driver may erroneously publish events containing authentication-related data to a command listener configured by an application

Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver

libmongoc SCRAM client nonce-validation bypass

Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output

Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated buffer

A mongoc_bulk_operation_t may read invalid memory if large options are passed