Mongodb Bson
2 CVEs affecting Mongodb Bson. Latest disclosed: 2020-03-30. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-7610 | Critical | 9.8 | 2020-03-30 | All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data. The package will ignore an unknown value for an object's _bsotype, leadi… |
CVE-2015-4411 | High | 7.5 | 2020-02-20 | The Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby before 3.0.4 as used in rubygem-moped allows remote attackers to cause a denial of service (worker… |