Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
11c8b2d5 by Salvatore Bonaccorso at 2026-08-28T10:56:51+02:00
Add CVE-2026-81525/php-mongodb
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -766,7 +766,8 @@ CVE-2026-81527 (A NoSQL/expression injection weakness
exists in the LINQ-to-aggr
CVE-2026-81526 (The MongoDB Rust Driver does not neutralize special characters
in a ca ...)
NOT-FOR-US: MongoDB Rust Driver
CVE-2026-81525 (The MongoDB client library for PHP does not sufficiently
sanitize spec ...)
- TODO: check
+ - php-mongodb <unfixed>
+ NOTE: https://jira.mongodb.org/browse/PHPLIB-1927
CVE-2026-81524 (A weakness in the MongoDB C Driver allows special elements in
caller-s ...)
TODO: check
CVE-2026-81523 (A missing input-validation issue in MongoDB libmongocrypt's
automatic- ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11c8b2d58a749d85e8c99f32338a18e2c9ff3e5a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/11c8b2d58a749d85e8c99f32338a18e2c9ff3e5a
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
