Ecosystem	Package	Version

Vulnerabilities

CVE-2026-1850

CVE-2026-1850

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash.

Published Feb 11, 2026

https://jira.mongodb.org/browse/SERVER-114126

CVSS ScoreHigh

7.5

Ecosystem	Package	Version


conda	free/mongodb	2.4.6
conda	free/mongodb	2.6.12
conda	free/mongodb	3.3.8
conda	free/mongodb	3.3.9
rpm	libmongodb	2.4.14-4.el6
rpm	libmongodb-devel	2.4.14-4.el6
conda	main/mongodb	3.4.10
conda	main/mongodb	3.6.5
conda	main/mongodb	4.0.2
conda	main/mongodb	4.0.3
conda	main/mongodb	4.2.14
cargo	mongodb	0.0.1
cargo	mongodb	0.1.0
cargo	mongodb	0.1.1
cargo	mongodb	0.1.3
cargo	mongodb	0.1.4
cargo	mongodb	0.1.5
cargo	mongodb	0.1.6
cargo	mongodb	0.1.7
cargo	mongodb	0.1.8
cargo	mongodb	0.10.0
cargo	mongodb	0.11.0
cargo	mongodb	0.2.0
cargo	mongodb	0.2.1
cargo	mongodb	0.2.2
cargo	mongodb	0.2.3
cargo	mongodb	0.2.5
cargo	mongodb	0.2.6
cargo	mongodb	0.2.7
cargo	mongodb	0.2.8
cargo	mongodb	0.2.9
cargo	mongodb	0.3.0
cargo	mongodb	0.3.10
cargo	mongodb	0.3.11
cargo	mongodb	0.3.12
cargo	mongodb	0.3.1
cargo	mongodb	0.3.2
cargo	mongodb	0.3.3
cargo	mongodb	0.3.4
cargo	mongodb	0.3.5
cargo	mongodb	0.3.6
cargo	mongodb	0.3.7
cargo	mongodb	0.3.8
cargo	mongodb	0.3.9
cargo	mongodb	0.4.0
cargo	mongodb	0.9.0-alpha
cargo	mongodb	0.9.0
cargo	mongodb	0.9.1
cargo	mongodb	0.9.2
cargo	mongodb	1.0.0

CVE-2026-1850 | Components Impacted | Sonatype Guide | Sonatype Guide