---
title: "MongoDB API changes, deprecations and deadlines | Harbyn"
description: "MongoDB: 0 upcoming deadlines and 4 recorded changes as of 2026-10-25, each with its source."
canonical: "https://harbyn.com/vendors/mongodb"
last-updated: 2026-10-12
---

# MongoDB: API changes and deadlines

Markdown version of <https://harbyn.com/vendors/mongodb>.

Cloud. 0 upcoming deadlines, 4 recorded changes. Every entry cites the MongoDB page we read it from.

## What we read

The MongoDB pages and feeds our ingestion visits, politely and on a schedule.

- **Deprecations**: <https://www.mongodb.com/legal/support-policy/lifecycles>
- **Releases**: <https://api.github.com/repos/mongodb/node-mongodb-native/releases?per_page=20>
- **Changelog**: <https://api.github.com/advisories?affects=mongodb,mongoose,pymongo,motor&per_page=20&sort=published&direction=desc>

## What the scanner looks for

How `harbyn scan` recognises MongoDB in a repository, on your machine. Nothing leaves it.

- **Packages**: `npm mongodb`, `npm mongoose`, `pypi pymongo`, `pypi motor`

## Upcoming deadlines

No upcoming MongoDB deadline in the feed right now.

## Change history

Newest first, by the date MongoDB announced it. This is the archive: past changes are not warnings, and changes we recorded after they took effect are marked as such.

### October 2026

- Oct 5, 2026, Security: [pymongo: GridFS methods could treat a dict passed as file ID as query criteria](https://github.com/advisories/GHSA-8fvv-fgr5-f8ch)
- Oct 5, 2026, Security: [PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption](https://github.com/advisories/GHSA-qx36-8mw2-4r3x)
- Oct 5, 2026, Security: [PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding](https://github.com/advisories/GHSA-v4x9-3549-crwv)
- Oct 5, 2026, Security: [PyMongo host injection in connection string parsing via percent-encoded delimiters](https://github.com/advisories/GHSA-vp6j-j7w5-5xjj)