Threats tagged 'brew-mongo-orchestration-cve-2026-88029'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.3%	CVE-2026-88029pymongo · PYTHON-5994 Use exact match for file ID in GridFS delete methods Medium6.1EPSS 0.3%2026-10-06GCVE DatabaseCVE-2026-88029 CVE-2026-88029 is a vulnerability in pymongo's GridFS API where the delete methods do not require an exact match on the file ID. If a hash is provided instead of the exact ID, it may be interpreted as criteria, potentially overriding the intended ID match. This could lead to unintended deletions or modifications when using the GridFS API. A patch addressing this issue is available in pymongo version 4.18.1 and later. EPSS 0.3%Report on CVE-2026-88029 Vulnerability #brew-mongo-orchestration-cve-2026-88029 #homebrew	GCVE Database	2026-10-06

Page 1 of 1