MongoDB
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 387 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 1, 2013 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →MongoDB Atlas SQL ODBC Driver uses ignored SQLBindCol BufferLength as fixed-width row-array stride, causing out-of-bounds writes
MongoDB Atlas SQL ODBC Driver writes 48-byte Extended JSON into fixed 16-byte SQL_C_GUID target, causing a 32-byte out-of-bounds write
EF Core provider: pipeline-form ExecuteUpdate evaluates a user string setter as a $-field reference
Rust Driver 3.9.1 exports CSFLE plaintext in `db.query.text` before encrypting the command
The DB Tools trust certificates issued by recoverable eMudhra intermediate CAs
NoSQL injection via mismatched BSON size prefix in raw document splice to the wire protocol
MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs
MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs
KMS request injection via unsanitized key vault and provider values in libmongocrypt
BSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guards
Monitor MongoDB in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.