Source Package: php-mongodb (2.0.0-1+deb13u1)
MongoDB driver for PHP
The following binary packages are built from this source package:
- php8.4-mongodb
MongoDB driver for PHP
- php-mongodb-all-dev
MongoDB driver for PHP
Packages / Debian 13 (Trixie) / Source / php / php-mongodb
Bekannte Sicherheitslücken
Die Paketzuordnung läuft.
| CVE | Schweregrad | Betroffene Versionen |
|---|---|---|
| [CVE-2026-112368] An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the pro | High(8.2) | BetroffenDetails (6)
|
| [CVE-2026-96745] Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event o | Medium(6.3) | BetroffenDetails (6)
|
| [CVE-2026-84968] An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory | Medium(6.9) | BetroffenDetails (6)
|
| [CVE-2026-81525] The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operat | High(8.6) | BetroffenDetails (6)
|
| [CVE-2026-6811] Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON documents in unusual circumstances when the source of these BSON documents is | Medium(6) | Unbekannt Die Paketzuordnung läuft. Beobachtet: Details (6)
|
| [CVE-2021-32050] node-mongodb: CVE-2021-32050 | Medium | Unbekannt Die Paketzuordnung läuft. Beobachtet: Details (6)
|
Zuletzt synchronisiert:
Quellen
- Debian 13 (Trixie) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signaturnachweis
trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Repository-signature verification record- Signed object
- https://deb.debian.org/debian/dists/trixie/InRelease
- Signed-object SHA-256
- 98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
- Signer fingerprint
- 4CB50190207B4758A3F73A796ED0E7B82643E131
- Keyring revision
- debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017 - Tool and policy
- gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1 - Verification time
- Sep 1, 2026
Repository metadata hash linkage- Path
- main/binary-amd64/Packages.xz
- Expected SHA-256
- 3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
- Observed SHA-256
- 3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
- Result
- match verified
- Debian 13 (Trixie) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signaturnachweis
trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Repository-signature verification record- Signed object
- https://deb.debian.org/debian/dists/trixie/InRelease
- Signed-object SHA-256
- 98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
- Signer fingerprint
- 4CB50190207B4758A3F73A796ED0E7B82643E131
- Keyring revision
- debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017 - Tool and policy
- gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1 - Verification time
- Sep 1, 2026
Repository metadata hash linkage- Path
- main/binary-arm64/Packages.xz
- Expected SHA-256
- 753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
- Observed SHA-256
- 753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
- Result
- match verified
- Debian SecurityOct 24, 2026
Authoritative source; repository metadata signature verified
Signaturnachweis
trixie-security-main-amd64:c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
Repository-signature verification record- Signed-object SHA-256
- 198287b2fa5f7e3bc836fc6ddb4fe339b90a2fe43dc3f2b57c002a66309e49d5
- Signer fingerprint
- B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
- Keyring revision
- debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017 - Tool and policy
- gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1 - Verification time
- Oct 24, 2026
Repository metadata hash linkage- Path
- main/binary-amd64/Packages.xz
- Expected SHA-256
- c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
- Observed SHA-256
- c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
- Result
- match verified