{"action":"Upgrade pymongo to 2.5.2 or later.","affected":[{"fixed":"2.5.2","introduced":"0"}],"component":"pymongo","cve_ids":["CVE-2013-2132"],"ecosystem":"PyPI","epss":0.04108,"exploited":false,"fixed_versions":["2.5.2"],"ghsa_id":"GHSA-x33v-f3gp-gw2c","id":"tcs_01M5KG5VC403BA383WQZ15MBT7","modified_at":"2023-11-08T03:57:17.791634Z","published_at":"2013-08-15T17:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2013-30","http://www.securityfocus.com/bid/60252","http://lists.opensuse.org/opensuse-updates/2013-06/msg00180.html","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=710597","http://www.osvdb.org/93804","https://github.com/mongodb/mongo-python-driver/commit/a060c15ef87e0f0e72974c7c0e57fe811bbd06a2","http://ubuntu.com/usn/usn-1897-1","http://www.debian.org/security/2013/dsa-2705","http://seclists.org/oss-sec/2013/q2/447","https://jira.mongodb.org/browse/PYTHON-532","https://github.com/advisories/GHSA-x33v-f3gp-gw2c"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2013-30","url":"https://osv.dev/vulnerability/PYSEC-2013-30"}],"summary":"bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via"}