Important
This is a security patch release. It addresses two CVEs reported against the driver, along with a small number of related fixes. There are no public API changes and no application code changes are required to upgrade. Note that the shape of some queries generated by the LINQ provider and by GridFS has changed — see the individual tickets below.
This is a patch release that contains fixes and stability improvements:
- CSHARP-6177 / CVE-2026-88026: Query filter regex injection via unescaped backslash and bracket in LINQ character-set translation
- CSHARP-6190 / CVE-2026-88025: Use exact match for file ID in GridFS delete methods
- CSHARP-6213: Normalize SRV target host names to lower case during SRV polling
The full list of issues resolved in this release is available at CSHARP JIRA project.
Documentation on the .NET driver can be found here.