Known Vulnerabilities for Bson by Bson Project
Listed below are 1 of the newest known vulnerabilities associated with "Bson" by "Bson Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126982 json | A type allow-list bypass in the BSON serialization library of the MongoDB C# Driver allows a type-restriction check to be cir... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126839 json | A deserialization type-restriction control in the BSON serialization component can be bypassed because the check used to reco... | Not Provided | 2026-11-13 | 2026-11-12 |
| CVE-2026-120954 json | A weakness in the BSON library's handling of a specialized binary vector data type allows an arithmetic wraparound when compu... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-118581 json | A BSON encoding component of the MongoDB Java Driver does not verify that an externally supplied raw document's self-declared... | Not Provided | 2026-10-28 | 2026-11-05 |
| CVE-2026-114654 json | A numeric-type conversion flaw in the BSON handling library of the MongoDB C# Driver allows an out-of-range binary subtype va... | Not Provided | 2026-10-22 | 2026-10-30 |
| CVE-2026-114651 json | A memory-handling weakness in the BSON deserialization component of the MongoDB C# Driver may cause data left over from previ... | Not Provided | 2026-10-22 | 2026-10-30 |
| CVE-2026-114646 json | A data-validation flaw exists in the BSON handling and binary serialization path of the MongoDB C# Driver. When an applicatio... | Not Provided | 2026-10-22 | 2026-11-02 |
| CVE-2026-114644 json | The MongoDB C# Driver's BSON library contains an uncontrolled resource consumption weakness in its deserialization handling o... | Not Provided | 2026-10-22 | 2026-11-02 |
| CVE-2026-113870 json | MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable s... | Not Provided | 2026-10-21 | 2026-10-30 |
| CVE-2026-112368 json | An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party wh... | Not Provided | 2026-10-19 | 2026-10-20 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Bson Project | Bson | 4.7.1 | |||
| Application | Bson Project | Bson | 4.7.0 | |||
| Application | Bson Project | Bson | 4.6.0 | |||
| Application | Bson Project | Bson | 4.5.0 | |||
| Application | Bson Project | Bson | 4.4.2 | |||
| Application | Bson Project | Bson | 4.4.1 | |||
| Application | Bson Project | Bson | 4.3.0 | |||
| Application | Bson Project | Bson | 4.3.0 | |||
| Application | Bson Project | Bson | 4.2.2 | |||
| Application | Bson Project | Bson | 4.2.1 | |||
| Application | Bson Project | Bson | 4.2.0 | |||
| Application | Bson Project | Bson | 4.2.0 | |||
| Application | Bson Project | Bson | 4.2.0 | |||
| Application | Bson Project | Bson | 4.1.1 | |||
| Application | Bson Project | Bson | 4.1.0 | |||
| Application | Bson Project | Bson | 4.0.4 | |||
| Application | Bson Project | Bson | 4.0.3 | |||
| Application | Bson Project | Bson | 4.0.2 | |||
| Application | Bson Project | Bson | 4.0.1 | |||
| Application | Bson Project | Bson | 4.0.0 |