Поиск уязвимостей
Количество 7
Количество 7
GHSA-q53w-frrr-28f5
In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the updateLookup full document mode, the crafted values were embedded into internal post-image lookup queries without proper sanitization, causing them to be interpreted as query operators rather than literal equality values. This could result in change stream consumers receiving incorrect post-image documents or encountering non-resumable fatal errors.
CVE-2026-82060
In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the updateLookup full document mode, the crafted values were embedded into internal post-image lookup queries without proper sanitization, causing them to be interpreted as query operators rather than literal equality values. This could result in change stream consumers receiving incorrect post-image documents or encountering non-resumable fatal errors.
CVE-2026-82060
In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the updateLookup full document mode, the crafted values were embedded into internal post-image lookup queries without proper sanitization, causing them to be interpreted as query operators rather than literal equality values. This could result in change stream consumers receiving incorrect post-image documents or encountering non-resumable fatal errors.
CVE-2026-82060
In MongoDB, insufficient validation of shard key values during documen ...
ROS-20261103-80-0051
Уязвимость mongodb-org
ROS-20261103-73-0052
Уязвимость mongodb-org
ALT-PU-2026-15077
ALT-PU-2026-15077: package `mongo7.0` update to version 7.0.41-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-q53w-frrr-28f5 In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the updateLookup full document mode, the crafted values were embedded into internal post-image lookup queries without proper sanitization, causing them to be interpreted as query operators rather than literal equality values. This could result in change stream consumers receiving incorrect post-image documents or encountering non-resumable fatal errors. | CVSS3: 5.4 | 0% Низкий | 2 месяца назад |
 | CVE-2026-82060 In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the updateLookup full document mode, the crafted values were embedded into internal post-image lookup queries without proper sanitization, causing them to be interpreted as query operators rather than literal equality values. This could result in change stream consumers receiving incorrect post-image documents or encountering non-resumable fatal errors. | CVSS3: 5.4 | 0% Низкий | 2 месяца назад |
 | CVE-2026-82060 In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the updateLookup full document mode, the crafted values were embedded into internal post-image lookup queries without proper sanitization, causing them to be interpreted as query operators rather than literal equality values. This could result in change stream consumers receiving incorrect post-image documents or encountering non-resumable fatal errors. | CVSS3: 5.4 | 0% Низкий | 2 месяца назад |
| CVE-2026-82060 In MongoDB, insufficient validation of shard key values during documen ... | CVSS3: 5.4 | 0% Низкий | 2 месяца назад |
 | ROS-20261103-80-0051 Уязвимость mongodb-org | CVSS3: 5.4 | 0% Низкий | 8 дней назад |
| ROS-20261103-73-0052 Уязвимость mongodb-org | CVSS3: 5.4 | 0% Низкий | 8 дней назад |
| ALT-PU-2026-15077 ALT-PU-2026-15077: package `mongo7.0` update to version 7.0.41-alt1 | CVSS3: 8.1 | 2 месяца назад |
Уязвимостей на страницу