CVE-2024-5629
2 advisories.
PyPI/pymongo CVE-2024-5629: medium 4.7, EPSS 0.66%
PyMongo Out-of-bounds Read in the bson module
Action: Upgrade pymongo to 4.6.3 or later.
pip install pymongo==4.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.6.3 | - |
Fixed versions
| 4.6.3 |
Sources
- osv: GHSA-m87m-mmvp-v9qm
- https://nvd.nist.gov/vuln/detail/CVE-2024-5629
- https://github.com/mongodb/mongo-python-driver/commit/56b6b6dbc267d365d97c037082369dabf37405d2
- https://gist.github.com/keltecc/62a7c2bf74a997d0a7b48a0ff3853a03
- https://github.com/mongodb/mongo-python-driver
- https://jira.mongodb.org/browse/PYTHON-4305
- https://lists.debian.org/debian-lts-announce/2024/06/msg00007.html
- https://security.snyk.io/vuln/SNYK-PYTHON-PYMONGO-6370597
CVE-2024-5629 · published · modified · JSON
PyPI/pymongo CVE-2024-5629: medium 4.7, EPSS 0.66%
PyMongo Out-of-bounds Read in the bson module
Action: Upgrade pymongo to 4.6.3 or later.
pip install pymongo==4.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.6.3 | - |
Fixed versions
| 4.6.3 |
Sources
- osv: PYSEC-2026-1826
- https://nvd.nist.gov/vuln/detail/CVE-2024-5629
- https://github.com/mongodb/mongo-python-driver/commit/56b6b6dbc267d365d97c037082369dabf37405d2
- https://gist.github.com/keltecc/62a7c2bf74a997d0a7b48a0ff3853a03
- https://github.com/mongodb/mongo-python-driver
- https://jira.mongodb.org/browse/PYTHON-4305
- https://lists.debian.org/debian-lts-announce/2024/06/msg00007.html
- https://security.snyk.io/vuln/SNYK-PYTHON-PYMONGO-6370597
- https://pypi.org/project/pymongo
- https://github.com/advisories/GHSA-m87m-mmvp-v9qm
CVE-2024-5629 · published · modified · JSON