php_library vulnerabilities

CVEs whose affected-version data names the php_library package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-88023High· 8.3

2w ago

GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB PHP Library

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal ide…

▾ TwilightMongoDB · MongoDB PHP LibraryEPSS 0.32%via CVEORG