Skip to content

2.5.4

Latest

Choose a tag to compare

@mongodb-dbx-release-bot mongodb-dbx-release-bot released this 08 Oct 18:14
· 1 commit to v2.5 since this release
Immutable release. Only release title and notes can be modified.

The PHP team is happy to announce that version 2.5.4 of the MongoDB PHP extension is now available.

Release Highlights

  • PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
  • PHPC-2741: Add additional length BSON length checks. CVE-2026-106432
  • PHPC-2505: Fix foreach iteration of MongoDB\Driver\Cursor after garbage collection.
  • PHPC-2779: Upgrade libmongoc to 2.5.6.
  • PHPC-2781: Upgrade libmongocrypt to 1.20.5.

A complete list of resolved issues in this release may be found in JIRA.

Documentation

Documentation is available on PHP.net.

Installation

You can either download and install the source manually, or you can install the extension with:

pie install mongodb/mongodb-extension:2.5.4

Sources and Windows binaries are attached to the GitHub release notes.

Full Changelog: 2.5.3...2.5.4