PD
Product
Php Driver
8
CVEs
0
On KEV
8.2
Max CVSS
2
New 30D
Severity mix
Critical 0High 5Medium 2Low 1
Watch
Add Php Driver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-106432 | 8.2 | Oct 8 | Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver Affected: 1.3.0 before 1.21.1; 2.0.0 before 2.1.11; 2.2.0 before 2.5.4 |
| CVE-2026-81525 | 8.1 | Aug 27 | Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver Affected: before 1.21.6; 2.0.0 before 2.4.1 |
| CVE-2024-7553 | 7.8 | Aug 7 | Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows Affected: before 1.18.1 |
| CVE-2026-6811 | 7.5 | May 14 | PHP Stack Exhaustion Affected: 1.21.0 before 1.21.5; 2.1.0 before 2.1.8 |
| CVE-2021-32050 | 7.5 | Aug 29 | Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application Affected: 1.0.0 before 1.9.2 |
| CVE-2026-106436 | 6.5 | Oct 8 | Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver Affected: 1.3.0 before 1.21.1; 2.0.0 before 2.1.11; 2.2.0 before 2.5.4 |
| CVE-2026-84968 | 5.3 | Sep 3 | Heap out-of-bounds read via corrupt nested BSON in field path error message Affected: 1.15.0 before 1.21.9; 2.0.0 before 2.1.9; 2.2.0 before 2.5.2 |
| CVE-2025-12119 | 3.3 | Nov 18 | A mongoc_bulk_operation_t may read invalid memory if large options are passed Affected: before 1.21.2 |
Showing 8