Known Vulnerabilities for Bson by Bson Project
Listed below are 1 of the newest known vulnerabilities associated with "Bson" by "Bson Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-44425 json | ShellHub is a centralized SSH gateway. Prior to 0.24.2, the device list endpoint accepts user-controlled identifiers in the t... | Not Provided | 2026-05-13 | 2026-05-14 |
| CVE-2026-13077 json | A missing bounds check in the BSON CodeWScope element accessors allows an attacker to trigger an out-of-bounds heap read via ... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-13072 json | When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during ... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-13066 json | Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in int... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-11933 json | A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when converting BSON documents to Jav... | Not Provided | 2026-06-12 | 2026-06-13 |
| CVE-2026-9740 json | A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sendi... | Not Provided | 2026-06-09 | 2026-06-10 |
| CVE-2026-6914 json | Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB ser... | Not Provided | 2026-04-29 | 2026-04-29 |
| CVE-2026-6811 json | Stack exhaustion vulnerability in the MongoDB PHP driver can cause application crashes when processing deeply nested BSON doc... | Not Provided | 2026-05-14 | 2026-05-14 |
| CVE-2025-61301 json | Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 (commit 52e4b43, on 2025-05-17) allows attacke... | Not Provided | 2025-10-20 | 2026-07-05 |
| CVE-2015-4412 json | BSON injection vulnerability in the legal? function in BSON (bson-ruby) gem before 3.0.4 for Ruby allows remote attackers to ... | 9.8 - CRITICAL | 2018-02-05 | 2018-03-13 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Bson Project | Bson | 4.7.1 | |||
| Application | Bson Project | Bson | 4.7.0 | |||
| Application | Bson Project | Bson | 4.6.0 | |||
| Application | Bson Project | Bson | 4.5.0 | |||
| Application | Bson Project | Bson | 4.4.2 | |||
| Application | Bson Project | Bson | 4.4.1 | |||
| Application | Bson Project | Bson | 4.3.0 | |||
| Application | Bson Project | Bson | 4.3.0 | |||
| Application | Bson Project | Bson | 4.2.2 | |||
| Application | Bson Project | Bson | 4.2.1 | |||
| Application | Bson Project | Bson | 4.2.0 | |||
| Application | Bson Project | Bson | 4.2.0 | |||
| Application | Bson Project | Bson | 4.2.0 | |||
| Application | Bson Project | Bson | 4.1.1 | |||
| Application | Bson Project | Bson | 4.1.0 | |||
| Application | Bson Project | Bson | 4.0.4 | |||
| Application | Bson Project | Bson | 4.0.3 | |||
| Application | Bson Project | Bson | 4.0.2 | |||
| Application | Bson Project | Bson | 4.0.1 | |||
| Application | Bson Project | Bson | 4.0.0 |