Lucene search

K
githubGitHub Advisory DatabaseGHSA-4JWP-VFVF-657P
HistoryFeb 10, 2022 - 11:30 p.m.

Deserialization of Untrusted Data in bson

2022-02-1023:30:20
CWE-502
GitHub Advisory Database
github.com
24

0.001 Low

EPSS

Percentile

22.1%

Incorrect parsing of certain JSON input may result in js-bson not correctly serializing BSON. This may cause unexpected application behaviour including data disclosure.

CPENameOperatorVersion
bsonlt1.1.4

0.001 Low

EPSS

Percentile

22.1%