MongoDB vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
84 matching records
- High7.7An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDCheck if you run itEPSS 0.47%Jul 7, 2025
- Medium6.5MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash.Check if you run itEPSS 0.33%Jul 7, 2025
- Medium4.4An issue has been identified in MongoDB Server where unredacted queries may inadvertently appear in server logs when certain error conditions are encountered.Check if you run itEPSS 0.28%Jul 7, 2025
- High7.5MongoDB Server may be susceptible to stack overflow due to JSON parsing mechanism, where specifically crafted JSON inputs may induce unwarranted levels of recursion, resulting in eCheck if you run itEPSS 0.38%Jun 26, 2025
- High7.5The MongoDB Server is susceptible to a denial of service vulnerability due to improper handling of specific date values in JSON input when using OIDC authentication.Check if you run itEPSS 0.51%Jun 26, 2025
- Medium4.2Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator.Check if you run itEPSS 0.17%Jun 26, 2025
- Medium5.0An authenticated user may trigger a use after free that may result in MongoDB Server crash and other unexpected behavior, even if the user does not have authorization to shut downCheck if you run itEPSS 0.27%Jun 26, 2025
- Critical9.8BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities.Check if you run itEPSS 0.64%May 16, 2025
- Critical9.9MongoDB mongo-express Remote Code Execution VulnerabilityPatch nowKEVEPSS 84.73%Dec 24, 2019