What’s Vulnerable › Products

MongoDB Python Driver vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your MongoDB Python Driver version is affected

Latest MongoDB Python Driver vulnerabilities

• CVE-2026-106435 — Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver (CVSS 4.7)
• CVE-2026-96749 — Heap out-of-bounds write via signed size overflow in BSON document encoding (CVSS 8.4)
• CVE-2026-96748 — Connection redirection via percent-encoded delimiter injection in connection string hosts (CVSS 6.5)
• CVE-2026-96747 — Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption (CVSS 5.0)
• CVE-2026-88029 — GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python Driver (CVSS 8.3)