VendorsMongoDBrust_driverall versions
Vulnerabilities

MongoDB Rust Driver

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

5CVEs
CVE-2026-88024
GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Rust Driver
Published 2026-09-10 · Analyzed
8.3EPSS 0.005
CVE-2025-11695
Configuration may unexpectedly disable certificate validation
Published 2025-10-13 · Analyzed
8.0EPSS 0.002
CVE-2024-6382
Adversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands.
Published 2024-07-02 · Analyzed
7.5EPSS 0.003
CVE-2026-81526
Cross-database write redirection via unvalidated dotted database name in bulk write namespaces
Published 2026-08-27 · Analyzed
7.1EPSS 0.004
CVE-2021-20332
MongoDB Rust Driver may publish events containing authentication-related data to a connection pool event listener configured by an application
Published 2021-08-02 · Modified
4.4EPSS 0.003