PD
Product
Php Driver
8
CVEs
0
On KEV
8.2
Max CVSS
2
New 30D
Severity mix
Critical 0High 5Medium 2Low 1
Watch
Add Php Driver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-106432 | 8.2 | Oct 8 | Heap buffer overflow via 32-bit string-length truncation in MongoDB PHP Driver Affected: 1.3.0 before 1.21.1; 2.0.0 before 2.1.11; 2.2.0 before 2.5.4 |
| CVE-2026-81525 | 8.1 | Aug 27 | Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver Affected: before 1.21.6; 2.0.0 before 2.4.1 |
| CVE-2024-7553 | 7.8 | Aug 7 | Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows Affected: before 1.18.1 |
| CVE-2026-6811 | 7.5 | May 14 | PHP Stack Exhaustion Affected: 1.21.0 before 1.21.5; 2.1.0 before 2.1.8 |
| CVE-2021-32050 | 7.5 | Aug 29 | Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application Affected: 1.0.0 before 1.9.2 |
Showing 5