The MongoDB Rust driver team is pleased to announce the v3.8.2 release of the mongodb crate, now available for download from crates.io.
Important
This is a security patch release for CVE-2026-81526. Upgrading is recommended for all users.
This release fixes a bug that would allow Client::bulk_write to write to a different database than the one specified in a write model's namespace.
Full Release Notes
Bugfixes
- RUST-2467 / CVE-2026-81526: Validate database and collection name arguments against "." and NUL bytes