GD
Product
GO Driver
5
CVEs
0
On KEV
8.1
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add GO Driver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-88031 | 8.1 | Sep 10 | GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver Affected: 1.0.0 before 1.17.10; 2.0.0 before 2.9.1 |
| CVE-2026-81521 | 6.5 | Aug 27 | Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver Affected: 2.1.0 before 2.8.2 |
| CVE-2021-20329 | 6.5 | Jun 10 | Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON Affected: through 1.5.0 |
| CVE-2026-107325 | 5.9 | Oct 8 | Application denial of service via missing BSON array length validation in MongoDB Go Driver Affected: 1.1.0 before 1.17.10; 2.0.0 before 2.9.2 |
| CVE-2026-107324 | 5.9 | Oct 8 | Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver Affected: 1.0.0 before 1.2.0; 2.0.0 before 2.9.0 |
Showing 5