Mongodb Bson vulnerabilities

2 vulnerabilities

Known vulnerabilities in Mongodb Bson, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2015-4411fedoraprojectfedora+2
EPSS score
6.37%
The Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby before 3.0.4 as used in rubygem-moped allows remote attackers to cause a denial of service (worker resource consumption) via a crafted string. NOTE: This issue is due to an incomplete fix to CVE-2015-4410.9.8CVE-2020-7610debiannode-mongodb+3
EPSS score
2.27%
All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data. The package will ignore an unknown value for an object's _bsotype, leading to cases where an object is serialized as a document rather than the intended BSON type.