atlas_sql_jdbc_driver vulnerabilities

CVEs whose affected-version data names the atlas_sql_jdbc_driver package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120953Medium· 4.3

3d ago

Atlas SQL JDBC Driver <=4.0.0: OIDC discovery endpoints not scheme-validated - attacker-controlled URI dispatched to OS protocol handler

A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive sign-in flow the driver accepts endpoint addresses supplied by the remote endpoint it is pointed at without validating …

▾ SunlitMongoDB · Atlas SQL JDBC DriverEPSS 0.24%via CVEORG