Is MongoDB 6.1.0 affected?

CVSS 8.1

3 known vulnerabilities affect 6.1.0 (highest CVSS 8.1).

Your branch 6.1 has reached end of life (Feb 9, 2023).

117 newer releases in its track, up to 9.0.4. What changed up to 9.0.4

Vulnerabilities affecting 6.1.0

8.1
CVE-2026-9753 The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApp… fixed in 7.0.35
6.4
CVE-2024-8207 In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating Systems, it may be possible for a unintended actor with host-level access to c… fixed in 6.1.1
5.0
CVE-2025-12657 The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access vio… fixed in 7.0.22