Skip to contentMongodb C\# Driver vulnerabilities
- mongodb c# driver, c\# driver +1 moreRegular expression injection via unescaped characters in LINQ query translation in MongoDB C# DriverCVE-2026-880267.1 High
- mongodb c# driver, c\# driver +1 moreGridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# DriverCVE-2026-880256.1 Medium
- mongodb c# driver, c\# driver +1 moreKMS master key exposure via unredacted credential serialization in driver settings stringCVE-2026-815306.8 Medium
- mongodb c# driver, c\# driver +1 moreConnection-option injection via unescaped settings in the canonical MongoDB URL builderCVE-2026-815297.1 High
- mongodb c# driver, c\# driver +1 moreNoSQL injection via array replacement bypassing update shape validation in driver write pathCVE-2026-815285.3 Medium
- mongodb c# driver, c\# driver +1 moreNoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translationCVE-2026-815276.9 Medium
- mongodb inc .net/c# driver, mongodb c\# driver +1 moreDeserializing compromised object with MongoDB .NET/C# Driver may cause remote code executionCVE-2022-48282Fix available6.6 Medium
- mongodb inc. c# driver, mongodb c\# driver +1 moreMongoDB C# Driver may publish events containing authentication-related data to a command listener configured by an applicationCVE-2021-20331Fix available4.2 Medium