PHP Driver
by MongoDB
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-7553 | Hig | 0.47 | 7.3 | 0.00 | Aug 7, 2024 | Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue… | ||
| CVE-2025-12119 | Med | 0.37 | 6.8 | 0.00 | Nov 18, 2025 | A mongoc_bulk_operation_t may read invalid memory if large options are passed. | ||
| CVE-2021-32050 | Med | 0.20 | 4.2 | 0.01 | Aug 29, 2023 | Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care,… |
- risk 0.47cvss 7.3epss 0.00
Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue…
- risk 0.37cvss 6.8epss 0.00
A mongoc_bulk_operation_t may read invalid memory if large options are passed.
- risk 0.20cvss 4.2epss 0.01
Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care,…