Debian/php-mongodb: unknown
Deserialization of untrusted data in the command monitoring support of the MongoDB PHP Driver can cause class names embedded in document content to be honored when the driver builds monitoring event o
Action: Upgrade php-mongodb to 2.0.0-1+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.0-1+deb13u1 | - |
Fixed versions
| 2.0.0-1+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-96745#Debian:13/php-mongodb
- https://security-tracker.debian.org/tracker/CVE-2026-96745
published · modified · JSON