Debian/php-mongodb: unknown
An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the pro
Action: Upgrade php-mongodb to 2.0.0-1+deb13u2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.0-1+deb13u2 | - |
Fixed versions
| 2.0.0-1+deb13u2 |
Sources
- osv: DEBIAN-CVE-2026-112368#Debian:13/php-mongodb
- https://security-tracker.debian.org/tracker/CVE-2026-112368
published · modified · JSON