一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月9日

CVE-2026-106438 [MEDIUM] – An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept c

未分类
📑 文章目录

An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This produces a value different from the supplied text. An actor who can provide a decimal string to an embedding application, including through Extended JSON parsing, can cause the application to store or use an incorrect numeric value.