Abstract: With the emergence of the Node.js ecosystem, JavaScript has become a widely used programming language for implementing server-side web applications. In this article, we present the first ...

Dubbed MongoBleed, the high-severity flaw allows unauthenticated, remote attackers to leak sensitive information from MongoDB servers. Threat actors started exploiting a high-severity MongoDB ...

A recently disclosed security vulnerability in MongoDB has come under active exploitation in the wild, with over 87,000 potentially susceptible instances identified across the world. The vulnerability ...

A severe vulnerability affecting multiple MongoDB versions, dubbed MongoBleed (CVE-2025-14847), is being actively exploited in the wild, with over 80,000 potentially vulnerable servers exposed on the ...

A high-severity security flaw has been disclosed in MongoDB that could allow unauthenticated users to read uninitialized heap memory. The vulnerability, tracked as CVE-2025-14847 (CVSS score: 8.7), ...

Update 12/26/25: Article updated to correct that the flaw has not been officially classified as an RCE. MongoDB has warned IT admins to immediately patch a high-severity memory-read vulnerability that ...

This is read by an automated voice. Please report any issues or inconsistencies here. On a nippy Monday night at the Zebulon in Frogtown, a man wearing a Jason Voorhees T-shirt steps onto a ...

This is read by an automated voice. Please report any issues or inconsistencies here. Hungarian Nobel Prize laureate László Krasznahorkai delivered a rare lecture in Stockholm, presenting ...

MongoDB surpassed third-quarter expectations and lifted its forecast as it benefits from AI and its Atlas platform gains popularity. CEO Chirantan "CJ" Desai said the company is approaching a "once in ...

Dev Ittycheria, who took MongoDB public in 2017, is stepping down as CEO. He's being replaced by Cloudflare executive Chirantan "CJ" Desai, effective Nov. 10. Desai spent the past year as Cloudflare's ...

What steps can reproduce the bug? Further information to issue #12117 we have tried to isolate why there is a leak (RSS it seems) with the node-mongodb-native module. We have set up a test environment ...