[Git][security-tracker-team/security-tracker][master] Add CVE-2026-6811/php-mongodb

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b85155ee by Salvatore Bonaccorso at 2026-05-15T10:45:25+02:00
Add CVE-2026-6811/php-mongodb

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13,7 +13,9 @@ CVE-2026-8596 (Cleartext storage of sensitive information in the ModelBuilder/Se
 CVE-2026-7373 (Rapid7 Metasploit Pro is vulnerable to a local privilege escalation at ...)
 	NOT-FOR-US: Rapid7 Metasploit Pro
 CVE-2026-6811 (Stack exhaustion vulnerability in the MongoDB PHP driver can cause app ...)
-	TODO: check
+	- php-mongodb <unfixed>
+	NOTE: https://jira.mongodb.org/browse/PHPC-2636
+	NOTE: Fixed by: https://github.com/mongodb/mongo-php-driver/commit/2060beb85a041182550d022ec223783ffdaf6ec8 (.21.5, 2.1.8)
 CVE-2026-6646 (The The7 theme for WordPress is vulnerable to Stored Cross-Site Script ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-4094 (The FOX \u2013 Currency Switcher Professional for WooCommerce plugin f ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b85155eea711b1743b93af9f5f536db3082a796d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b85155eea711b1743b93af9f5f536db3082a796d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260515/5696740b/attachment-0001.htm>