Known vulnerabilities in mongo-python-driver
Vendor:
MongoDB, Inc.
Software:
mongo-python-driver
Software CPE:
cpe:2.3:a:mongodb:mongo-python-driver:*:*:*:*:*:*:*:*
Website:
https://www.mongodb.com/
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
4.18.2
4.18.1
4.18.0
4.17.0
4.16.0
4.15.5
4.15.4
4.15.3
4.15.2
4.15.1
4.15.0
4.14.1
4.14.0
4.13.2
4.13.1
4.13.0
4.12.1
4.12.0
4.11.3
4.11.2
4.11.1
4.11
4.9.2
4.10.1
4.10.0
4.9.1
4.9
4.8.0
4.7.3
4.7.2
4.7.1
4.7.0
4.6.3
4.6.2
4.6.1
4.6.0
4.5.0
4.4.1
4.4.0
4.3.3
3.13.0
4.3.2
4.3.1
4.3.0
4.2.0
4.1.1
4.1.0
4.0.2
4.0.1
3.12.3
4.0
3.12.2
3.12.1
3.12.0
3.11.4
3.11.3
0.6
0.7
0.7.1
0.7.2
0.8
0.8.1
0.9
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.10
0.10.1
0.10.2
0.10.3
0.11
0.11.1
0.11.2
0.11.3
0.12
0.13
0.14
0.14.1
0.14.2
0.15
0.15.1
0.15.2
0.16
1.0
1.1
1.1.1
1.1.2
1.2
1.2.1
1.3
1.4
1.5
1.5.1
1.5.2
1.6
1.7
1.8
1.8.1
1.9
1.10
1.10.1
1.11
2.0
2.0.1
2.1
2.1.1
2.2
2.2.1
2.3
2.4
2.4.1
2.4.2
2.5
2.5.1
2.5.2
2.6
2.6.1
2.6.2
2.6.3
2.7
2.7.1
2.7.2
2.8
2.8.1
2.9
2.9.1
2.9.2
2.9.3
2.9.4
2.9.5
3.0
3.0.1
3.0.2
3.0.3
3.1
3.1.1
3.2
3.2.1
3.2.2
3.3.0
3.3.1
3.4.0
3.5.0
3.5.1
3.6.0
3.6.1
3.11.2
3.11.1
3.11.0
3.7.0
3.7.1
3.7.2
3.8.0
3.9.0
3.10.0
3.10.1
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU151938 - Improper Handling of URL Encoding (Hex Encoding) CVE-2026-96748 |
CWE-177 | Medium | 4.18.2 | 24.09.2026 |
SB2026092467 SB2026100196 |
||
| #VU151937 - Server-Side Request Forgery (SSRF) CVE-2026-96747 |
CWE-918 | Low | 4.18.2 | 24.09.2026 |
SB2026092467 SB2026100196 |
||
| #VU151936 - Integer overflow CVE-2026-96749 |
CWE-190 | Low | 4.18.2 | 24.09.2026 |
SB2026092467 SB2026100196 |
||
| #VU151672 - Improper Neutralization of Special Elements in Data Query Logic CVE-2026-88029 |
CWE-943 | Medium | 4.18.1 | 22.09.2026 |
SB2026092276 |
||
| #VU98510 - Out-of-bounds read CVE-2024-5629 |
CWE-125 | Medium | 4.6.3 | 14.10.2024 |
SB2024101477 SB2024101478 SB2024101488 and 6 more |
||
| #VU98509 - NULL Pointer Dereference CVE-2013-2132 |
CWE-476 | Medium | 2.5.2 | 14.10.2024 |
SB2013081502 |