← Πίσω στην αναζήτηση CVE

CVE-2026-6231

MongoDB C Driver

Περιγραφή

The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed or invalid UTF-8 sequences to bypass validation and be processed incorrectly. The issue may affect applications that rely on these functions to validate untrusted BSON data before further processing. This issue affects MongoDB C Driver versions prior to 1.30.5, MongoDB C Driver version 2.0.0 and MongoDB C Driver version 2.0.1

CVSS 4.3EPSS 0.184%Κίνδυνος 0.44
Προβολή πηγής
Δημοσίευση
2026-04-13 16:16:36
Επηρεαζόμενες εκδόσεις
<1.30.5,<2.0.2
Τύπος
Package
Διάνυσμα
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N