Laravel MongoDB vulnerabilities

3 known vulnerabilities in Laravel MongoDB from MongoDB. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Laravel MongoDB: Access of Resource Using Incompatible Type

  CVE-2026-118510Oct 28, 2026MongoDB

  A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the absence of a related record to be compiled with an identifier of the wrong data type. In an application that relies on such a check to decide

• 8.1 High severity

  Laravel MongoDB (PHP): Improper Neutralization of Special Elements in Data Query Logic

  CVE-2026-88027Sep 10, 2026MongoDB

  Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoDB integration for Laravel can cause a caller-supplied embedded record identifier to be interpreted as a query condition rather than as a lit

• 7.7 High severity

  Laravel MongoDB (PHP): Improper Neutralization of Special Elements in Data Query Logic

  CVE-2026-88022Sep 10, 2026MongoDB

  Improper neutralization of special elements in data query logic in the MongoDB integration for Laravel can cause an array supplied to an explicit equality filter to be interpreted as a query condition rather than as a literal value. This affects the three-argu