Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
MongoDB C Driver Could Crash from Malicious HTTP Response
published 7 months ago
Summary
A security update is available for the MongoDB C driver, which could cause applications using the driver to crash if a malicious third-party server or attacker sends a malformed HTTP response. This could potentially allow an attacker to disrupt service. Affected users should update to the latest version of the driver to prevent this issue.
What to do
- Update openeuler mongo-c-driver to version 1.30.6-2.oe2203sp4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| openEuler:22.03-LTS-SP4 | openeuler | mongo-c-driver |
< 1.30.6-2.oe2203sp4 Fix: upgrade to 1.30.6-2.oe2203sp4
|
Original advisory text
mongo-c-driver security update
mongo-c-driver is a project that includes two libraries: libmongoc, a client library written in C for MongoDB. libbson, a library providing useful routines related to building, parsing, and iterating BSON documents.
Security Fix(es):
A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver.(CVE-2026-4359)
Security Fix(es):
A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver.(CVE-2026-4359)
References
- https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-4359 Vendor Advisory
Severity
6.8
Medium
Timeline
Published27 Mar 2026
Updated21 Aug 2026
First seen27 Mar 2026
Sources
OESA-2026-1746 · OSV
Track software like this
Free during beta