CVE-2026-2303
MediumAdvisory
Published 10 Feb 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.002
- 14th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 579
- of 17,787 indexed, latest versions
- Container images
- 607
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling
Carried by container images the latest versions of 579 of 17,787 indexed charts deploy, on 607 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.mongodb.org/ | v1.0.0, v1.0.3, v1.0.4, v1.1.0+54 more | 1.17.7 | 604 |
| go.mongodb.org/ | v2.2.2, v2.3.0, v2.3.1, v2.4.0 | 2.4.2 | 12 |
- OSV records
- GHSA-cp6g-7hqx-qxhp
- Also known as
- GO-2026-5327
Charts affected
579 by stars
Container images carrying it
607 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | a0a002cb113c | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | 14feefde1b80 | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | 193280a33bc1 | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | 944b2c67345c | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | c96d4fb1d57f | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | cb4ac6a56555 | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | 983627001c89 | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | af92db7eac86 | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | b6a89b8ec08f | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | d3d65efa3bee | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | dde69a8b6f4b | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | 075b1ba2c4eb | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | 6559acbd5d77 | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | b899dbd1b901 | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | c5dd35038287 | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | df0cd5887887 | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | f6639335d34a | go.mongodb.org/ | 1.17.7 | 2 |
| quay.io/ | 1d022ef4b8ef | go.mongodb.org/ | 1.17.7 | 2 |
| 0xpolygon/ | 396d3de26d8b | go.mongodb.org/ | 1.17.7 | 1 |
| 0xpolygon/ | 34ddf259993c | go.mongodb.org/ | 1.17.7 | 1 |
| aktosecurity/ | fcf8be10bead | go.mongodb.org/ | 1.17.7 | 1 |
| alex6021710/ | 6c7a47e470c3 | go.mongodb.org/ | 1.17.7 | 1 |
| alex6021710/ | 744b8a924f35 | go.mongodb.org/ | 1.17.7 | 1 |
| alpine/ | 6dbe6f391eda | go.mongodb.org/ | 1.17.7 | 1 |
| alpine/ | 7a319b15cfc9 | go.mongodb.org/ | 1.17.7 | 1 |
| alpine/ | 7e1e7d5b7a96 | go.mongodb.org/ | 1.17.7 | 1 |
| alpine/ | 9c4976d47656 | go.mongodb.org/ | 1.17.7 | 1 |
| alpine/ | bd01dae02676 | go.mongodb.org/ | 1.17.7 | 1 |
| alpine/ | cd560fce90f7 | go.mongodb.org/ | 1.17.7 | 1 |
| alpine/ | d870622d0040 | go.mongodb.org/ | 1.17.7 | 1 |
| alpine/ | e5c0b053fed7 | go.mongodb.org/ | 1.17.7 | 1 |
| alpine/ | eec354133193 | go.mongodb.org/ | 1.17.7 | 1 |
| amazon/ | 9dea6643715a | go.mongodb.org/ | 1.17.7 | 1 |
| apecloud/ | 98abc64aa985 | go.mongodb.org/ | 1.17.7 | 1 |
| aquasec/ | 6e790e233872 | go.mongodb.org/ | 1.17.7 | 1 |
| aquasec/ | 944a04445179 | go.mongodb.org/ | 1.17.7 | 1 |
| aquasec/ | 973d0df16189 | go.mongodb.org/ | 1.17.7 | 1 |
| aquasec/ | bcc376de8d77 | go.mongodb.org/ | 1.17.7 | 1 |
| arconixforge/ | c08d7c438966 | go.mongodb.org/ | 1.17.7 | 1 |
| artifacthub/ | 111918d8c399 | go.mongodb.org/ | 1.17.7 | 1 |
| artifacthub/ | 2d8365601f0e | go.mongodb.org/ | 1.17.7 | 1 |
| artifacthub/ | 323d026e78c3 | go.mongodb.org/ | 1.17.7 | 1 |
| artifacthub/ | 6596c8c4d955 | go.mongodb.org/ | 1.17.7 | 1 |
| assistiot/ | d157fbe150e3 | go.mongodb.org/ | 1.17.7 | 1 |
| bitnamilegacy/ | 33ae872fc99d | go.mongodb.org/ | 1.17.7 | 1 |
| bitnamilegacy/ | cb8ab5515676 | go.mongodb.org/ | 1.17.7 | 1 |
| bitnamilegacy/ | 0b60b6565ab2 | go.mongodb.org/ | 1.17.7 | 1 |
| bitnamilegacy/ | 0f7c8ac484ac | go.mongodb.org/ | 1.17.7 | 1 |
| bitnamilegacy/ | 5501c419f42e | go.mongodb.org/ | 1.17.7 | 1 |
| bitnamilegacy/ | 5bb0aa825d16 | go.mongodb.org/ | 1.17.7 | 1 |