Mongodb: >> Php Driver >> 1.21.2 Security Vulnerabilities
An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is returned to application code. This may result in unintended disclosure of limited memory contents.
CVSS Score
6.9
EPSS Score
0.002
Published
2026-09-03
The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations silently directed at a different storage location than the one the application intended.
CVSS Score
8.6
EPSS Score
0.005
Published
2026-08-27
Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON documents in unusual circumstances when the source of these BSON documents is not MongoDB Server.
CVSS Score
6.0
EPSS Score
0.004
Published
2026-05-14