io.github.mongodb-js/mongodb-mcp-server · mongodb-mcp-server · changes | VerifyMCPRecorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.https://verifymcp.io[SECURITY] mongodb-mcp-server: CVE-2026-42338 affects this package (medium)https://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fc4b9-3209-76de-8b18-fd63004792echttps://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fc4b9-3209-76de-8b18-fd63004792ecCVE-2026-42338 affects this package (medium). Compared against 2026-08-01.Sun, 02 Aug 2026 23:04:59 GMTsecurityregressionadvisory.identified[SECURITY] mongodb-mcp-server: Known CVEs (unverified → fail)https://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fc4b9-320b-785e-ab53-c1817816cd1fhttps://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fc4b9-320b-785e-ab53-c1817816cd1fKnown CVEs (unverified → fail). Compared against 2026-08-01.Sun, 02 Aug 2026 23:04:59 GMTsecurityregressioncheck.reverified[SECURITY] mongodb-mcp-server: Install scripts (unverified → pass)https://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fc4b9-320c-7696-b245-267321bba63ehttps://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fc4b9-320c-7696-b245-267321bba63eInstall scripts (unverified → pass). Compared against 2026-08-01.Sun, 02 Aug 2026 23:04:59 GMTsecurityimprovementcheck.reverified[SECURITY] mongodb-mcp-server: Provenance (unverified → pass)https://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fc4b9-320c-7d8a-a6f8-fb8afa49cc27https://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fc4b9-320c-7d8a-a6f8-fb8afa49cc27Provenance (unverified → pass). Compared against 2026-08-01.Sun, 02 Aug 2026 23:04:59 GMTsecurityimprovementcheck.reverified[SECURITY] mongodb-mcp-server: The attested source repository moved (mongodb-js/mongodb-mcp-server)https://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fc4b9-320d-7f19-a746-531eb868751dhttps://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fc4b9-320d-7f19-a746-531eb868751dThe attested source repository moved (mongodb-js/mongodb-mcp-server). Compared against 2026-08-01.Sun, 02 Aug 2026 23:04:59 GMTsecurityneutralprovenance.repo_changed[SECURITY] mongodb-mcp-server: Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.)https://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fc298-aaf9-7a96-a7e2-498ca14d9f12https://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fc298-aaf9-7a96-a7e2-498ca14d9f12Stability (Stability not yet verified: our sandbox run of this package did not complete, so we have no schema to compare.). Compared against 2026-08-01.Sun, 02 Aug 2026 13:10:12 GMTsecurityneutralcheck.reason[SECURITY] mongodb-mcp-server: Malware scan (unverified → pass)https://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fc298-aaef-7a42-ae05-b032559cd6c4https://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fc298-aaef-7a42-ae05-b032559cd6c4Malware scan (unverified → pass). Compared against 2026-08-01.Sun, 02 Aug 2026 13:10:12 GMTsecurityimprovementcheck.reverified[SECURITY] mongodb-mcp-server: Malware scan (pass → unverified)https://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fb6e5-a249-722e-a72d-f807fd7a0b6bhttps://verifymcp.io/servers/mongodb-js-mongodb-mcp-server/mongodb-mcp-server#chg-chg_019fb6e5-a249-722e-a72d-f807fd7a0b6bMalware scan (pass → unverified). Compared against 2026-07-30.Fri, 31 Jul 2026 06:38:50 GMTsecurityregressioncheck.unverifiable