Find command with $meta sort can lead to crash
During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure.
BIT-mongodb-2026-9737
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:BIT-mongodb-2026-9737
mongodb
Source reference: /affected/0/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 7.0.39
Source reference:
/affected/0/ranges8.0.28Source reference:
/affected/0/ranges8.3.7Source reference:
/affected/0/ranges9.0.2Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "SEMVER",
"events": [
{
"introduced": "7.0.0"
},
{
"fixed": "7.0.39"
},
{
"introduced": "8.0.0"
},
{
"fixed": "8.0.28"
},
{
"introduced": "8.2.0"
},
{
"fixed": "8.3.7"
},
{
"introduced": "9.0.0"
},
{
"fixed": "9.0.2"
}
]
}
],
"package": {
"name": "mongodb",
"purl": "pkg:bitnami/mongodb",
"ecosystem": "Bitnami"
},
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"database_specific": {
"source": "https://github.com/bitnami/vulndb/tree/main/data/mongodb/BIT-mongodb-2026-9737.json"
}
}
]- Related CVEs
- CVE-2026-9737
Source reference:
/aliases
Publisher severity
high
Source reference: /database_specific/severity
- Event
- #59534 · Revision 1
- Added to Heist Feed
- Publisher date