| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-114655 | vulnerable | vulnerable (no DSA) | fixed | fixed | libmongocrypt builds requests to external key management services (AWS ... |
| CVE-2026-106434 | vulnerable | vulnerable (no DSA) | fixed | fixed | The explicit decryption component of MongoDB libmongocrypt can return ... |
| CVE-2026-106433 | vulnerable | vulnerable (no DSA) | fixed | fixed | Improper state management in MongoDB libmongocrypt can cause provider- ... |
| CVE-2026-106429 | vulnerable | vulnerable (no DSA) | fixed | fixed | An integer underflow in the KMS endpoint-parsing logic of MongoDB libm ... |
| CVE-2026-84971 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Improper handling of an unexpected value size in the decryption path o ... |
| CVE-2026-84962 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | An unauthorized user with key vault write access may cause an authoriz ... |
| CVE-2026-81523 | vulnerable (no DSA, postponed) | fixed | fixed | fixed | A missing input-validation issue in MongoDB libmongocrypt's automatic- ... |