Race Condition in MongoDB Server Text Index Query Parsing Leads to Heap Use-After-Free and Denial of Service

Heap out-of-bounds read via corrupt nested BSON in field path error message

Silent field truncation via unchecked int cast of huge JSON string values in JSON-to-BSON parser

Improper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Termination

Awaitable Hello Command in Exhaust Mode Unthrottled Response Loop Leading to Denial of Service

Schema validation log messages may not redact user data

Users could trigger a crash of mongod primaries during promotion to sharded

"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier

An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory…

Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split

Improper serialization of internal state in the authorization subsystem in MongoDB Server's authorization subsystem permits a user with valid credentials to bypass IP whitelisting…

Heap overflow via 32-bit length wrap of the URI username in Windows Kerberos auth message wrapping

MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output

Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption

Incomplete Redaction of Sensitive Information in MongoDB Server Logs

A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query

Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver

MongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Database Metadata

Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt

NoSQL operator injection via unvalidated replacement document in findOneAndReplace

Ops Manager Improper Authorization in Daily Host Monitoring Retrieval

Unrecognized payload acceptance in explicit decryption in MongoDB libmongocrypt

Arbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminal

Improper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service

Improper Access Control Allowing Cross-User Session Metadata Disclosure in $listSessions Aggregation Stage

MongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cross-Database Privilege Misuse

MongoDB Aggregation Command Invariant Assertion Failure Leading to Process Termination

Flaw in the updateUser Command May Allow Unauthorized Configuration Change

Stack memory disclosure in filemd5 command

profile command may permit unauthorized configuration

Authenticated KMS request forgery via CRLF injection in GCP key identifier strings

Improper Enforcement of Authentication Mechanism Restrictions in MongoDB Server Allows Use of Disabled Authentication Method

Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the…

Cross-document data leak via malformed BSON array parsing in reused thread buffer

Silent Decimal128 value corruption via incorrect exactness check in MongoDB C Driver

Out-of-bounds read in SCRAM response parsing in MongoDB C Driver

Heap overflow via truncated base64 encoding of binary fields in length-limited JSON output

Bulk write with options may read invalid memory

MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafted UTF-8 string in a BSON request

The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of…

The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read system memory…

The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and…

MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a…

bson/_cbsonmodule.c in the mongo-python-driver (aka

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system in an arbitrary…