Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-13056

No fix known EPSS <1%CVSS 6.5

Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error.

Published 2026-07-22 · CVE record · OSV

Products: mongodb_server

Distro releases

ReleasePackageFixed in
Ubuntu Pro 14.04 LTSmongodbno fix
Ubuntu Pro 16.04 LTSmongodbno fix
Ubuntu Pro 18.04 LTSmongodbno fix
Ubuntu Pro 20.04 LTSmongodbno fix