MONGODB Java Driver

• CVE-2026-118581 Medium 6.5 NoSQL injection via mismatched BSON size prefix in raw document splice to the wire protocol 0.2%
• CVE-2026-88033 High 8.3 GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Java Driver 0.5%
• CVE-2026-88032 Medium 5.9 Application denial of service via cancellation race in reactive client-side encryption in MongoDB Java Driver 0.3%