{"action":"Upgrade pymongo to 4.6.3 or later.","affected":[{"fixed":"4.6.3","introduced":"0"}],"component":"pymongo","cve_ids":["CVE-2024-5629"],"ecosystem":"PyPI","epss":0.00663,"exploited":false,"fixed_versions":["4.6.3"],"ghsa_id":"GHSA-m87m-mmvp-v9qm","id":"tcs_01M5KGVXMBKXF452XWCH9KTJK8","modified_at":"2026-07-07T17:47:50.595411828Z","published_at":"2026-07-07T11:45:45.680005Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1826","https://nvd.nist.gov/vuln/detail/CVE-2024-5629","https://github.com/mongodb/mongo-python-driver/commit/56b6b6dbc267d365d97c037082369dabf37405d2","https://gist.github.com/keltecc/62a7c2bf74a997d0a7b48a0ff3853a03","https://github.com/mongodb/mongo-python-driver","https://jira.mongodb.org/browse/PYTHON-4305","https://lists.debian.org/debian-lts-announce/2024/06/msg00007.html","https://security.snyk.io/vuln/SNYK-PYTHON-PYMONGO-6370597","https://pypi.org/project/pymongo","https://github.com/advisories/GHSA-m87m-mmvp-v9qm"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"PYSEC-2026-1826","url":"https://osv.dev/vulnerability/PYSEC-2026-1826"}],"summary":"PyMongo Out-of-bounds Read in the bson module"}