CVE record · 1 source
CVE-2026-106436
CVSS 4.8The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit.
- Vendor
- MongoDB
- Product
- MongoDB
- CVSS
- 4.8
- Exposure class
- Database
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit.
The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unauthenticated actor who can cause an affected…