Search for packages
| purl | pkg:pypi/pymongo@0.7 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3z21-133b-9kch
Aliases: CVE-2024-21506 GHSA-cr6f-gf5w-vhrc |
Duplicate This advisory duplicates another. |
Affected by 0 other vulnerabilities. |
|
VCID-bstf-w638-8uex
Aliases: CVE-2013-2132 GHSA-x33v-f3gp-gw2c PYSEC-2013-30 |
bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an "invalid DBRef." |
Affected by 2 other vulnerabilities. |
|
VCID-fcud-p9kt-3bfv
Aliases: CVE-2024-5629 GHSA-m87m-mmvp-v9qm |
PyMongo Out-of-bounds Read in the bson module Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with string. If the following bytes are not printable UTF-8 the parser throws an exception with a single byte. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||