MONGODB Python Driver

• CVE-2026-106435 Medium 5.1 Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver <0.1%
• CVE-2026-96749 High 8.4 Heap out-of-bounds write via signed size overflow in BSON document encoding 0.2%
• CVE-2026-96748 Medium 6.5 Connection redirection via percent-encoded delimiter injection in connection string hosts 0.4%
• CVE-2026-96747 Medium 5.0 Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption 0.2%
• CVE-2026-88029 High 8.3 GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Python Driver 0.3%