VersionDrift
Product

Is MongoDB 8.1.0 affected?

May 27, 2025 · Release notes ↗

EOL

4 known vulnerabilities affect 8.1.0 (highest CVSS 6.5).

Your branch 8.1 has reached end of life (Sep 30, 2025).

27 newer releases in its track, up to 9.0.4. What changed up to 9.0.4

Vulnerabilities affecting 8.1.0

  • 6.5
    CVE-2026-6914 Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all MongoDB Se… fixed in 8.2.7
  • 6.5
    CVE-2025-13644 MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assumes the presence of multiple documents i… fixed in 8.1.2
  • 6.5
    CVE-2025-10061 An authorized user can cause a crash in the MongoDB Server through a specially crafted $group query. This vulnerability is related to the incorrect handling of certain accumulator functions when ad… fixed in 8.1.2
  • 6.5
    CVE-2025-7259 An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users…

Newer releases

9.0.4Oct 14, 20268.1.0 → 9.0.4
9.0.2Oct 14, 20268.1.0 → 9.0.2
8.3.13Oct 13, 20268.1.0 → 8.3.13
8.3.11Sep 11, 20268.1.0 → 8.3.11
8.3.9Sep 8, 20268.1.0 → 8.3.9
8.3.8Aug 11, 20268.1.0 → 8.3.8
8.3.7Jul 24, 20268.1.0 → 8.3.7
8.3.4Jun 15, 20268.1.0 → 8.3.4
8.3.3Jun 15, 20268.1.0 → 8.3.3
8.3.2May 14, 20268.1.0 → 8.3.2
8.3.1Jun 3, 20268.1.0 → 8.3.1
8.3.0Jun 3, 20268.1.0 → 8.3.0
8.2.12Jul 28, 20268.1.0 → 8.2.12
8.2.11Jun 16, 20268.1.0 → 8.2.11
8.2.10Jun 16, 20268.1.0 → 8.2.10
See how far your stack has drifted from upstream. Release data from vendors’ own sources · feed under CC BY 4.0 · Code under AGPL-3.0 Settings Feed status