Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-1849

No fix known EPSS <1%CVSS 6.5

MongoDB Server may experience an out-of-memory failure while evaluating expressions that produce deeply nested documents. The issue arises in recursive functions because the server does not periodically check the depth of the expression.

Published 2026-02-10 · CVE record · OSV

Products: MongoDB Inc. MongoDB Server

Distro releases

ReleasePackageFixed in
Ubuntu Pro 18.04 LTSmongodbno fix
Ubuntu Pro 20.04 LTSmongodbno fix