What is GHSA-528v-8qvj-8g29?

GHSA-528v-8qvj-8g29 is a security advisory published by GitHub Security Advisories with High severity. During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t...

Which CVE IDs does GHSA-528v-8qvj-8g29 cover?

GHSA-528v-8qvj-8g29 covers the following CVE IDs: CVE-2026-9737. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-528v-8qvj-8g29?

GHSA-528v-8qvj-8g29 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-528v-8qvj-8g29HighCVSS 6.5

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t...

Vendor

GitHub Security Advisories

Published

July 22, 2026

Last Modified

July 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-9737 →

📋 Description

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-9737
https://jira.mongodb.org/browse/SERVER-128341
https://github.com/advisories/GHSA-528v-8qvj-8g29