Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver

NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation

Heap over-read or silent misparse via 32-bit truncation of JSON length in BSON JSON parser

KMS master key exposure via unredacted credential serialization in driver settings string

Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver

Heap write primitive via size round-up wrap during JSON parsing on 32-bit builds

BSON element injection via NUL-embedded document keys in builder append

bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values

NoSQL injection via array replacement bypassing update shape validation in driver write path

Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver

Integer Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer()

Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser

Specific versions of the MongoDB C# Driver may erroneously publish events containing authentication-related data to a command listener configured by an application