Threats tagged 'ghsa-8fxw-fmj8-xp7j'

CVE-2026-88023 is a vulnerability in the MongoDB PHP Library's GridFS component where improper neutralization of special elements in file identifiers allows an authenticated user to manipulate query logic. This can lead to unauthorized disclosure of stored file contents, deletion of all file chunks in a bucket, or unintended file renaming. The issue affects versions >=1.1.0 <1.21.5 and >=2.0.0 <2.4.2 and has been fixed in versions 1.21.5 and 2.4.2.