RD
Product
Rust Driver
5
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add Rust Driver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-88024 | 8.3 | Sep 10 | GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Rust Driver Affected: 2.4.0 before 3.9.1 |
| CVE-2025-11695 | 7.5 | Oct 13 | When tlsInsecure=False appears in a connection string, certificate validation is disabled Affected: before 3.2.5 |
| CVE-2024-6382 | 7.5 | Jul 2 | Incorrect handling of certain string inputs may result in MongoDB Rust driver constructing unintended server commands Affected: 2.0.0 before 2.8.2 |
| CVE-2026-81526 | 6.5 | Aug 27 | Cross-database write redirection via unvalidated dotted database name in bulk write namespaces Affected: 3.0.0 before 3.8.2 |
| CVE-2021-20332 | 4.4 | Aug 2 | Specific MongoDB Rust Driver versions can include credentials used by the connection pool to authenticate connections in the monitoring event that is emitted when the pool is… Affected: 1.0.0 through 1.2.1; 2.0.0; 2.0.0 |
Showing 5