mongodb/mongo-php-driver 2.5.4

on GitHub

The PHP team is happy to announce that version 2.5.4 of the MongoDB PHP extension is now available.

• mongodb/mongodb-extension on Packagist.
• mongodb on PECL

Release Highlights

• PHPC-2739: Check returns of BSON append operations. CVE-2026-106436
• PHPC-2741: Add additional length BSON length checks. CVE-2026-106432
• PHPC-2505: Fix foreach iteration of MongoDB\Driver\Cursor after garbage collection.
• PHPC-2779: Upgrade libmongoc to 2.5.6.
• PHPC-2781: Upgrade libmongocrypt to 1.20.5.

A complete list of resolved issues in this release may be found in JIRA.

Documentation

Documentation is available on PHP.net.

Installation

You can either download and install the source manually, or you can install the extension with:

pie install mongodb/mongodb-extension:2.5.4

Sources and Windows binaries are attached to the GitHub release notes.

Full Changelog: 2.5.3...2.5.4