pymongo

vulnerable: 0.1.1pre ... 2.5.1 (73 versions)

bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "inv…

vulnerable: 0.1.1pre ... 4.6.2 (137 versions)

An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory.

vulnerable: 0.1.1pre ... 4.9.2 (171 versions)

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal ide…

vulnerable: 3.10.0 ... 4.9.2 (63 versions)

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryptio…

vulnerable: 3.10.0 ... 4.9.2 (71 versions)

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connect…

vulnerable: 0.1.1pre ... 4.9.2 (172 versions)

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is perfor…