What is GHSA-fjxq-47rx-gwhh?

GHSA-fjxq-47rx-gwhh is a security advisory published by GitHub Security Advisories with High severity. An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue...

Which CVE IDs does GHSA-fjxq-47rx-gwhh cover?

GHSA-fjxq-47rx-gwhh covers the following CVE IDs: CVE-2026-19004. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-fjxq-47rx-gwhh?

GHSA-fjxq-47rx-gwhh has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

GHSA-fjxq-47rx-gwhhHighCVSS 8.1

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue...

Vendor

GitHub Security Advisories

Published

August 12, 2026

Last Modified

August 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-19004 →

📋 Description

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns crafted metadata. This may result in process termination, disclosure of process memory, or, under certain conditions, arbitrary code execution.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-19004
https://github.com/mongodb/mongo-bi-connector-odbc-driver/releases/tag/v1.4.9
https://github.com/advisories/GHSA-fjxq-47rx-gwhh