Is MongoDB 6.3.2 affected?

CVSS 8.1

3 known vulnerabilities affect 6.3.2 (highest CVSS 8.1).

Your branch 6.3 has reached end of life (Aug 31, 2023).

111 newer releases in its track, up to 9.0.4. What changed up to 9.0.4

Vulnerabilities affecting 6.3.2

8.1
CVE-2026-9753 The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApp… fixed in 7.0.35
5.3
CVE-2023-1409 If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it i…
5.0
CVE-2025-12657 The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access vio… fixed in 7.0.22