Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 19:53:22 +0000 CVE-2026-2303 — Heap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak https://vulnerability.circl.lu/vuln/cve-2026-2303 <p><strong>Affected:</strong> MongoDB Inc MongoDB Go Driver</p> <p>The mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not guaranteed to be null-terminated or have extra padding, this results in reading one byte past the allocated heap buffer.</p> <p><strong>Affected:</strong> MongoDB Inc MongoDB Go Driver</p> <p>The mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not guaranteed to be null-terminated or have extra padding, this results in reading one byte past the allocated heap buffer.</p> https://vulnerability.circl.lu/vuln/cve-2026-2303