PT-2024-4425 · Pypi +7 · Pymongo +7

🗓️ 05 Jun 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

PyMongo versions 4.6.2 and earlier have an out-of-bounds read issue, update to 4.6.3 or later.

Reporter	Title	Published	Views	Family All 124
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses Flask_Cors-4.0.0-py2.py3-none-any.whl which is vulnerable to CVE-2024-1681	12 Aug 202408:29	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Advisor With Watson for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	17 Mar 202513:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Flask-Cors affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2024-1681]	17 Mar 202508:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Flask_Cors affects IBM Cloud Pak for Data System 1.0(CPDS 1.0)[CVE-2024-1681].	4 May 202518:01	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	17 Jun 202420:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - MVI Component uses tar-6.2.0.tgz, Flask_Cors-3.0.10-py2.py3-none-any.whl, bcprov-jdk18on-1.72.jar which are vulnerable to CVE-2024-28863, CVE-2024-1681 and CVE-2024-30171	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to MongoDB sensitive information disclosure vulnerability [ CVE-2024-5629]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Log Injection Vulnerability in orydolphin/flask-cors (Debug Logging) affects watsonx.data	8 Apr 202608:45	–	ibm
Tenable Nessus	Amazon Linux 2023 : python3-bson, python3-pymongo, python3-pymongo-gridfs (ALAS2023-2024-614)	13 May 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : python36:3.6 (ALSA-2025:8419)	5 Jun 202500:00	–	nessus

Source	Link
osv	www.osv.dev/vulnerability/DLA-3832-1
linux	www.linux.oracle.com/errata/ELSA-2025-8419.html
errata	www.errata.almalinux.org/8/ALSA-2025-8419.html
cve	www.cve.org/CVERecord
security-tracker	www.security-tracker.debian.org/tracker/DLA-3889-1
security-tracker	www.security-tracker.debian.org/tracker/source-package/pymongo
osv	www.osv.dev/vulnerability/DLA-3889-1
osv	www.osv.dev/vulnerability/USN-6904-1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-5629
osv	www.osv.dev/vulnerability/CVE-2024-5629

10 Jun 2025 00:00Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.14.7 - 8.1

CVSS 35.3

EPSS0.00179

SSVC