CVE-2026-2303
MediumAdvisory
Published 10 Feb 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.002
- 14th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 581
- of 17,781 indexed, latest versions
- Container images
- 608
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling
Carried by container images the latest versions of 581 of 17,781 indexed charts deploy, on 608 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| go.mongodb.org/ | v1.0.0, v1.0.3, v1.0.4, v1.1.0+54 more | 1.17.7 | 605 |
| go.mongodb.org/ | v2.2.2, v2.3.0, v2.3.1, v2.4.0 | 2.4.2 | 12 |
- OSV records
- GHSA-cp6g-7hqx-qxhp
- Also known as
- GO-2026-5327
Charts affected
581 by stars
Container images carrying it
608 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| minio/ | 14b7076ca85a | go.mongodb.org/ | 1.17.7 | 1 |
| minio/ | 391d1d45fdbe | go.mongodb.org/ | 1.17.7 | 1 |
| minio/ | 46b3009bf704 | go.mongodb.org/ | 1.17.7 | 1 |
| minio/ | 4c4a4876193f | go.mongodb.org/ | 1.17.7 | 1 |
| minio/ | 551682a57a94 | go.mongodb.org/ | 1.17.7 | 1 |
| minio/ | 6d770d7f255c | go.mongodb.org/ | 1.17.7 | 1 |
| minio/ | b833a1699b4f | go.mongodb.org/ | 1.17.7 | 1 |
| minio/ | d249d1fb6966 | go.mongodb.org/ | 1.17.7 | 1 |
| minio/ | f9576903f19d | go.mongodb.org/ | 1.17.7 | 1 |
| minio/ | fc6bedc99355 | go.mongodb.org/ | 1.17.7 | 1 |
| minio/ | 170b154d2c61 | go.mongodb.org/ | 1.17.7 | 1 |
| moikot/ | 8625f53aa9b7 | go.mongodb.org/ | 1.17.7 | 1 |
| moikot/ | fb8565140106 | go.mongodb.org/ | 1.17.7 | 1 |
| nathanfirmo/ | 6b0487e6e987 | go.mongodb.org/ | 1.17.7 | 1 |
| netapp/ | 49cfe552d9c2 | go.mongodb.org/ | 1.17.7 | 1 |
| netrisai/ | 14d82948a8b2 | go.mongodb.org/ | 1.17.7 | 1 |
| ondrejsika/ | d95eaeee2172 | go.mongodb.org/ | 1.17.7 | 1 |
| opencsghq/ | 302c9d45d8a8 | go.mongodb.org/ | 1.17.7 | 1 |
| openmined/ | 3a4144c0bb82 | go.mongodb.org/ | 1.17.7 | 1 |
| oryd/ | 2a13bb8d362c | go.mongodb.org/ | 1.17.7 | 1 |
| oryd/ | 8f15006a080d | go.mongodb.org/ | 1.17.7 | 1 |
| oryd/ | 467329abde34 | go.mongodb.org/ | 1.17.7 | 1 |
| otel/ | 37fa87091cfa | go.mongodb.org/ | 1.17.7 | 1 |
| otel/ | 3bc07732530c | go.mongodb.org/ go.mongodb.org/ | 1.17.7 2.4.2 | 1 |
| otel/ | 5ac3e0ba2b0b | go.mongodb.org/ | 1.17.7 | 1 |
| otel/ | 71fcef33ae71 | go.mongodb.org/ | 1.17.7 | 1 |
| otel/ | 923eb1cfae32 | go.mongodb.org/ | 1.17.7 | 1 |
| otel/ | 995f17004231 | go.mongodb.org/ | 1.17.7 | 1 |
| otel/ | a7343f018690 | go.mongodb.org/ go.mongodb.org/ | 1.17.7 2.4.2 | 1 |
| otel/ | b3079f45e19b | go.mongodb.org/ | 2.4.2 | 1 |
| otel/ | c6671841470b | go.mongodb.org/ | 1.17.7 | 1 |
| otel/ | dfb3a55ea8c9 | go.mongodb.org/ | 1.17.7 | 1 |
| otel/ | faf125d656fa | go.mongodb.org/ go.mongodb.org/ | 1.17.7 2.4.2 | 1 |
| percona/ | 6cce2698d3f5 | go.mongodb.org/ | 1.17.7 | 1 |
| percona/ | d09453ce7886 | go.mongodb.org/ | 1.17.7 | 1 |
| percona/ | 3232ae01d0ff | go.mongodb.org/ | 1.17.7 | 1 |
| percona/ | 003f9c25f842 | go.mongodb.org/ | 1.17.7 | 1 |
| prom/ | 4f6c47e39a90 | go.mongodb.org/ | 1.17.7 | 1 |
| prom/ | 5880ec936055 | go.mongodb.org/ | 1.17.7 | 1 |
| prom/ | b440bc0e8aa5 | go.mongodb.org/ | 1.17.7 | 1 |
| prom/ | cd134bd4fca0 | go.mongodb.org/ | 1.17.7 | 1 |
| prom/ | e4ca62c0d62f | go.mongodb.org/ | 1.17.7 | 1 |
| prom/ | f7ffebdd428b | go.mongodb.org/ | 1.17.7 | 1 |
| reportportal/ | 464468240d7b | go.mongodb.org/ | 1.17.7 | 1 |
| reportportal/ | da5d8e1395fe | go.mongodb.org/ | 1.17.7 | 1 |
| rezachalak/ | 34f694325191 | go.mongodb.org/ | 1.17.7 | 1 |
| robotshop/ | 119b545823cd | go.mongodb.org/ | 1.17.7 | 1 |
| sarwansharma/ | 59d1da9385d1 | go.mongodb.org/ | 1.17.7 | 1 |
| semitechnologies/ | 7a00d226f063 | go.mongodb.org/ | 1.17.7 | 1 |
| sigma2as/ | c284ead9ec3e | go.mongodb.org/ | 1.17.7 | 1 |