C Driver CVE-2025-12119

bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. Rated medium

Namespace injection in the MongoDB C++ Driver (all versions prior to r4.5.1) allows low-privileged users of affected mul

Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underl

Connection-option injection in the MongoDB C# Driver allows a low-privileged application user to introduce or suppress s

NoSQL injection in the MongoDB C# Driver's LINQ-to-aggregation translation layer allows network-accessible, unauthentica

Sensitive KMS provider credentials supplied for client-side field-level encryption (CSFLE) in the MongoDB C# Driver are

The legacy GridFS API in the MongoDB C Driver fails to validate file metadata fields retrieved from the database, enabli

NoSQL injection in the MongoDB C# Driver's document-replacement code path allows network-accessible, low-privileged atta

Namespace injection in MongoDB C Driver (libmongoc) allows any caller-controlled database or collection name containing

When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. Rate

MongoDB C Driver bson_validate function returns early on specific inputs and incorrectly reports successful validation,

Specific versions of the MongoDB C# Driver may erroneously publish events containing authentication-related data to a co