Vulnerabilidades de MongoDB Java Driver (CVE)

Registros CVE publicados para MongoDB Java Driver, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

4 resultados
5.9Media
CVE-2026-88032

Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver

MongoDB Java Driver; MongoDB org.mongodb:mongodb-crypt Maven package; MongoDB org.mongodb:mongodb-driver-reactivestreams Maven package

A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operat…