https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:17:09 +0000 https://cve.radiocsirt.org/vuln/bit-mongodb-2026-82054 <p><strong>Affected:</strong> Bitnami: mongodb</p> <p>A security issue exists in MongoDB server&#39;s JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size, resulting in significant memory amplification. Under concurrent request load, the cumulative memory consumption can exhaust available heap memory, causing the server&#39;s out-of-memory handler to terminate the mongod process and deny service to all connected clients.</p> <p><strong>Affected:</strong> Bitnami: mongodb</p> <p>A security issue exists in MongoDB server&#39;s JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size, resulting in significant memory amplification. Under concurrent request load, the cumulative memory consumption can exhaust available heap memory, causing the server&#39;s out-of-memory handler to terminate the mongod process and deny service to all connected clients.</p> https://cve.radiocsirt.org/vuln/bit-mongodb-2026-82054 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1157 certfr-2026-avi-1157 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1157 https://cve.radiocsirt.org/vuln/euvd-2026-365264 EUVD-2026-365264 https://cve.radiocsirt.org/vuln/euvd-2026-365264 https://cve.radiocsirt.org/vuln/fkie_cve-2026-82054 <p>A security issue exists in MongoDB server&#39;s JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size, resulting in significant memory amplification. Under concurrent request load, the cumulative memory consumption can exhaust available heap memory, causing the server&#39;s out-of-memory handler to terminate the mongod process and deny service to all connected clients.</p> <p>A security issue exists in MongoDB server&#39;s JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size, resulting in significant memory amplification. Under concurrent request load, the cumulative memory consumption can exhaust available heap memory, causing the server&#39;s out-of-memory handler to terminate the mongod process and deny service to all connected clients.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-82054 https://cve.radiocsirt.org/vuln/ghsa-6wc7-3wqm-rgrj <p>A security issue exists in MongoDB server&#39;s JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size, resulting in significant memory amplification. Under concurrent request load, the cumulative memory consumption can exhaust available heap memory, causing the server&#39;s out-of-memory handler to terminate the mongod process and deny service to all connected clients.</p> <p>A security issue exists in MongoDB server&#39;s JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size, resulting in significant memory amplification. Under concurrent request load, the cumulative memory consumption can exhaust available heap memory, causing the server&#39;s out-of-memory handler to terminate the mongod process and deny service to all connected clients.</p> https://cve.radiocsirt.org/vuln/ghsa-6wc7-3wqm-rgrj https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-82054 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb</p> <p>A security issue exists in MongoDB server&#39;s JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size, resulting in significant memory amplification. Under concurrent request load, the cumulative memory consumption can exhaust available heap memory, causing the server&#39;s out-of-memory handler to terminate the mongod process and deny service to all connected clients.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb</p> <p>A security issue exists in MongoDB server&#39;s JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size, resulting in significant memory amplification. Under concurrent request load, the cumulative memory consumption can exhaust available heap memory, causing the server&#39;s out-of-memory handler to terminate the mongod process and deny service to all connected clients.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-82054 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3236 <p>Ein Angreifer kann mehrere Schwachstellen in MongoDB Server ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen und beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in MongoDB Server ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen und beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3236