mcp-mongodb

Direct Vulnerabilities

Known vulnerabilities in the mcp-mongodb package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Resource Exhaustion	<3.1.0-r0
M Improper Authorization	<3.1.0-r0
L Loop with Unreachable Exit Condition ('Infinite Loop')	<3.1.0-r0
L CVE-2026-75975	<3.1.0-r0
L CVE-2026-86472	<3.1.0-r0
L CVE-2026-82562	<3.1.0-r0
H CVE-2026-84933	<3.1.0-r0
L CVE-2026-84890	<3.1.0-r0
L OS Command Injection	<3.1.0-r0
L Directory Traversal	<3.1.0-r0
H Improper Validation of Specified Quantity in Input	<3.1.0-r0
L Improper Certificate Validation	<3.1.0-r0
L Arbitrary Code Injection	<3.1.0-r0
L Incorrect Regular Expression	<3.1.0-r0
L Information Exposure	<3.1.0-r0
C Arbitrary Command Injection	<3.1.0-r0
L Incorrect Type Conversion or Cast	<3.1.0-r0
L HTTP Request Smuggling	<3.1.0-r0
L Uncaught Exception	<3.1.0-r0
L CVE-2026-12590	<3.1.0-r0
L Use of Less Trusted Source	<3.1.0-r0
L Race Condition	<3.1.0-r0
L Information Exposure Through Server Error Message	<3.1.0-r0
L Resource Exhaustion	<3.1.0-r0
L Directory Traversal	<3.1.0-r0
L Directory Traversal	<3.1.0-r0
L Insufficient Comparison	<3.1.0-r0
L CVE-2026-18540	<3.1.0-r0
L GHSA-frvp-7c67-39w9	<3.1.0-r0
M Cross-site Scripting (XSS)	<3.1.0-r0
C CVE-2026-84961	<3.1.0-r0
L CVE-2026-82417	<3.1.0-r0
L CVE-2026-84292	<3.1.0-r0
L Inefficient Regular Expression Complexity	<3.1.0-r0
L Insufficient Verification of Data Authenticity	<3.1.0-r0
M Arbitrary Code Injection	<3.1.0-r0
L CVE-2026-18446	<3.1.0-r0
L Use of Less Trusted Source	<3.1.0-r0
M CVE-2026-84947	<3.1.0-r0
L Arbitrary Command Injection	<3.1.0-r0
L Exposure of Data Element to Wrong Session	<3.1.0-r0
L GHSA-g7r4-m6w7-qqqr	<3.1.0-r0
L Cross-site Scripting (XSS)	<3.1.0-r0
L Resource Exhaustion	<3.1.0-r0
L CVE-2026-76172	<3.1.0-r0
L Resource Exhaustion	<3.1.0-r0
L CVE-2026-75931	<3.1.0-r0
L Improper Input Validation	<3.1.0-r0
L CVE-2026-18149	<3.1.0-r0
L Resource Exhaustion	<3.1.0-r0
L Server-Side Request Forgery (SSRF)	<3.1.0-r0
L Improper Input Validation	<3.1.0-r0
L CVE-2026-19534	<3.1.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<3.1.0-r0
L Directory Traversal	<3.1.0-r0
L Insufficient Comparison	<3.1.0-r0
L Resource Exhaustion	<3.1.0-r0
L HTTP Request Smuggling	<3.1.0-r0
L CVE-2026-10732	<3.1.0-r0
L Inefficient Regular Expression Complexity	<3.1.0-r0
M Resource Exhaustion	<3.1.0-r0
L Interpretation Conflict	<3.1.0-r0
L Directory Traversal	<3.1.0-r0
L Allocation of Resources Without Limits or Throttling	<3.1.0-r0
L CVE-2026-90711	<3.1.0-r0
L Information Exposure Through Caching	<3.1.0-r0
L CVE-2026-14257	<3.1.0-r0
M CVE-2026-85008	<3.1.0-r0
L CVE-2026-85024	<3.1.0-r0
L Resource Exhaustion	<3.1.0-r0
L CVE-2026-75899	<3.1.0-r0
M Directory Traversal	<3.1.0-r0
L CVE-2026-39243	<3.1.0-r0
L Insufficient Verification of Data Authenticity	<3.1.0-r0
L Improper Validation of Specified Quantity in Input	<3.1.0-r0
M HTTP Response Splitting	<3.1.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<3.1.0-r0
L Improper Input Validation	<3.1.0-r0
C OS Command Injection	<3.1.0-r0
L CVE-2026-85152	<3.1.0-r0
L Algorithmic Complexity	<3.1.0-r0
L Improper Encoding or Escaping of Output	<3.1.0-r0
L Resource Exhaustion	<3.1.0-r0
L CVE-2026-8723	<3.1.0-r0
M Improper Validation of Specified Quantity in Input	<3.0.4-r0
L GHSA-r3ph-w7gj-g6xm	<3.0.4-r0
M Cross-site Scripting (XSS)	<3.0.4-r0
L Resource Exhaustion	<2.0.0-r0
L CVE-2026-13676	<2.1.0-r0
L CVE-2026-16221	<2.1.0-r0
L GHSA-5p4m-2wfm-xmqj	<2.0.0-r0
L Algorithmic Complexity	<2.0.0-r0
L Algorithmic Complexity	<2.0.0-r0
L Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
L Overly Permissive Cross-domain Whitelist	<3.1.0-r0
L XML Injection	<3.1.0-r0

Vulnerability

Vulnerable Version

Resource Exhaustion

<3.1.0-r0