What’s Vulnerable › Products

MongoDB Go Driver vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your MongoDB Go Driver version is affected

Latest MongoDB Go Driver vulnerabilities

• CVE-2026-107325 — Application denial of service via missing BSON array length validation in MongoDB Go Driver (CVSS 5.9)
• CVE-2026-107324 — Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver (CVSS 5.9)
• CVE-2026-88031 — GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver (CVSS 8.1)
• CVE-2026-81521 — Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver (CVSS 6.5)
• CVE-2021-20329 — Specific cstrings input may not be properly validated in the Go Driver (CVSS 6.5)