Composer mongodb/mongodb has 3 known advisories in the phpwarden feed. Feed 2026.10.29.4, updated 2026-10-29.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2021-32050 | MongoDB Driver may publish events containing authentication-related data | medium | 4.2 | >=1.0.0 and <1.9.2 | 1.9.2 |
| CVE-2026-81525 | mongodb: Reject "." and NUL bytes in database and collection names | high | 8.1 | <1.21.4 or >=2.0.0 and <2.4.1 | 1.21.4, 2.4.1 |
| CVE-2026-88023 | MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs | medium | 0.0 | >=1.1.0 and <1.24.5 or >=2.0.0 and <2.4.2 | 1.24.5, 2.4.2 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# PHP projects (recommended) composer require --dev phpwarden/phpwarden # then vendor/bin/phpwarden deps composer.lock # or, without Composer pipx install phpwarden && phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked