MongoDB security advisory (AV26-1122)

Serial number: AV26-1122 Date: November 4, 2026 As of November 3, 2026, MongoDB is affected by vulnerabilities in the following product: C Driver Prior to 1.30.15 Prior to 2.5.8 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Failure to parse OP_COMPRESSED reply can leak mongoc_gridfs_bucket_download_to_stream may abort on bad metadata MongoDB Alerts