Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-81525 →
DEBIAN-CVE-2026-81525
The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations silently directed at a different storage location than the one the application intended.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
php-mongodb
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
php-mongodb
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
php-mongodb
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Références
- advisory security-tracker.debian.org