MongoDB · weakness class
SQL Injection
26 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 26 is a mark on the map. Named now: 1 to 26, most at risk first.
- NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guard
- Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver
- GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver
- GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# Driver
- GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Rust Driver
- GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C++ Driver
- GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Java Driver
- Unauthorized document disclosure and deletion via query-operator injection in explicit equality filters in MongoDB integration for Laravel
- MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE Output
- Unauthorized document disclosure via query-operator injection in polymorphic relation identifiers in MongoDB integration for Laravel
- Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver
- Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups
- GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB PHP Library
- NoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keys
- Unauthorized cache lock takeover via expression injection in lock owner values in MongoDB integration for Laravel
- NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation
- NoSQL operator injection via unvalidated replacement document in findOneAndReplace
- MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output
- Update operator injection via single-element list rewriting in the update builder
- NoSQL injection via array replacement bypassing update shape validation in driver write path
- Mass deletion and overwrite of embedded documents via query-operator injection in embedded record keys in MongoDB integration for Laravel
- GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver
- GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver
- GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python Driver
- NoSQL injection via mismatched BSON size prefix in raw document splice to the wire protocol
- EF Core provider: pipeline-form ExecuteUpdate evaluates a user string setter as a $-field reference
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP