Threats
Vulnerabilities and patches
Breaches and privacy
Research
World
Learn
Wednesday 4 November
Global

Your region, kept on this device.

DonateGet the appSign in

MongoDB

Company

Security timeline

  1. Vulnerability reported by Canadian Centre for Cyber SecurityMongoDB C Driver advisory flags information leak and crash flaws

Recent news

Canadian Centre for Cyber Security·

MongoDB C Driver advisory flags information leak and crash flaws

advisory AV26-1122, dated 4 November 2026, covers the MongoDB C Driver before 1.30.15 and before 2.5.8. The flaws are a failure to parse OPCOMPRESSED replies that can leak data, and a case where mongocgridfsbucketdownloadtostream may abort on bad metadata. Administrators should review the linked MongoDB alerts and apply the updates.

Am I affected?
Ask
1

Last updated 4 November 2026. Facts come from our own stories, NVD and CISA KEV, MITRE ATT&CK and Wikidata, each named beside the fact; the introduction, when there is one, is from Wikipedia. We never show company logos.

Report a mistake