Known Vulnerabilities for Schema Builder CLI by MongoDB
Listed below are 6 of the newest known vulnerabilities associated with "Schema Builder CLI" by "MongoDB".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-63428 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `completeSubmission` accepts a `hiddenFields: [{id, name... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-59859 json | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.4, Kiota's PHP generator embedded OpenAPI description, de... | Not Provided | 2026-07-16 | 2026-07-29 |
| CVE-2026-48153 json | Budibase is an open-source low-code platform. Prior to 3.39.0, fetchToken in the OAuth2 SDK makes a POST to a builder-supplie... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-39968 json | TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the fix for GHSA-4xc5-wfwc-jw47 ("Credential Theft via Clien... | Not Provided | 2026-05-22 | 2026-05-26 |
| CVE-2026-19502 json | MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a l... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2025-50455 json | SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppoint... | Not Provided | 2026-07-27 | 2026-07-27 |