Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
MongoDB 8.3.7 can let attackers bypass security controls
published 2 months ago
Summary
The MongoDB 8.3.7 package contains two flaws that could let a malicious user avoid the database’s built‑in protection mechanisms and potentially access or alter data. Updating to the latest 8.3.7‑r0 release removes these weaknesses. Apply the update as soon as possible to keep your data safe.
What to do
- Update cleanstart mongodb to version 8.3.7-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | mongodb |
< 8.3.7-r0 Fix: upgrade to 8.3.7-r0
|
Original advisory text
Security fixes in mongodb 8.3.7-r0
Package mongodb version 8.3.7-r0 fixes 2 vulnerabilities: CVE-2026-2303, ghsa-259r-337f-4rfw
References
Timeline
Published13 Aug 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-VZ50651 · OSV
Track software like this
Free during beta