https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 13:42:57 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-106435 <p>The MongoDB Python Driver&#39;s binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decode_all API can cause the application process to terminate when the C extension is loaded. The driver&#39;s normal database wire-protocol path does not reach this code.</p> <p>The MongoDB Python Driver&#39;s binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decode_all API can cause the application process to terminate when the C extension is loaded. The driver&#39;s normal database wire-protocol path does not reach this code.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-106435 https://vulnerability.circl.lu/vuln/ghsa-86gh-39m5-hhg6 <p>The MongoDB Python Driver&#39;s binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decode_all API can cause the application process to terminate when the C extension is loaded. The driver&#39;s normal database wire-protocol path does not reach this code.</p> <p>The MongoDB Python Driver&#39;s binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decode_all API can cause the application process to terminate when the C extension is loaded. The driver&#39;s normal database wire-protocol path does not reach this code.</p> https://vulnerability.circl.lu/vuln/ghsa-86gh-39m5-hhg6