MongoDB ↗
MongoDB · Database
75/100 Good
Summary iPlain-English security verdict for MongoDB, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.
MongoDB currently scores 75/100 — good. 1 actively-exploited vulnerability (CISA KEV) affects older releases (e.g. CVE-2025-14847) — staying on the latest supported version keeps you clear of it. The latest supported release is 8.3.1. It's largely safe; apply minor updates as they appear.
Disclosure trend iNew CVEs published for MongoDB each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.
'19
'20
'21
'22
'23
'24
'25
'26
Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.
Most urgent first — actively exploited, then likeliest to be exploited.
CVE-2025-14847 HIGH ● exploited CWE-130 EPSS 63% → fixed in 8.2.3 CVE-2013-1892 MEDIUM Improper input validation EPSS 52% → see advisory CVE-2017-15535 CRITICAL EPSS 0% → fixed in 3.4.10Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.
How long each MongoDB release line is supported — and when it sunsets.
8.3 latest 8.3.1 Supported until 2029-10-31
8.2 latest 8.2.6 Supported until 2026-07-31
8.1 latest 8.1.3 End of life ended 2025-09-30
8.0 latest 8.0.21 Supported until 2029-10-31
7.3 latest 7.3.4 End of life ended 2024-10-31
7.2 latest 7.2.2 End of life ended 2024-03-27
7.1 latest 7.1.1 End of life ended 2024-01-23
7.0 latest 7.0.32 Supported until 2027-08-31
6.3 latest 6.3.2 End of life ended 2023-08-31
6.2 latest 6.2.1 End of life ended 2023-04-24
See all upcoming end-of-life dates →