PHP Library vulnerabilities

2 known vulnerabilities in PHP Library from MongoDB. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  MongoDB PHP Library: Improper Neutralization of Special Elements in Data Query Logic

  CVE-2026-88023Sep 10, 2026MongoDB

  Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticat

• 8.1 High severity

  PHP Library: Improper Neutralization of Special Elements in Data Query Logic

  CVE-2026-81525Aug 27, 2026MongoDB

  The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into t