Lucene search
+L

62 matches found

OSV
OSV
•added 2026/09/17 11:50 a.m.•17 views

BIT-MONGODB-2026-82054 Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size,...

7.1CVSS6AI score0.00402EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-82054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafte...

7.1CVSS6AI score0.00402EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/08 5:18 p.m.•13 views

CVE-2026-82054

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size,...

7.1CVSS0.00402EPSS
SaveExploits0References1
MongoDB
MongoDB
•added 2026/09/08 4:12 p.m.•14 views

Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size,...

7.1CVSS6AI score0.00402EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/09/08 4:12 p.m.•19 views

EUVD-2026-72941

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size,...

7.1CVSS5.8AI score0.00402EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/08 4:12 p.m.•7 views

CVE-2026-82054 Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size,...

7.1CVSS5.9AI score
SaveExploits0References3
CVE
CVE
•added 2026/09/08 4:12 p.m.•35 views

CVE-2026-82054

A denial-of-service vulnerability exists in MongoDB server's JSON Pointer parser , which is invoked during $jsonSchema query filter processing. A specially crafted $jsonSchema filter field causes the parser to process input without enforcing adequate limits on iteration count or total allocation ...

7.1CVSS6AI score0.00402EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/08 4:12 p.m.•12 views

CVE-2026-82054 Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size,...

7.1CVSS6AI score0.00402EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 4:12 p.m.•36 views

CVE-2026-82054 Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size,...

7.1CVSS0.00402EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•4 views

CVE-2026-82054: Allocation of Resources Without Limits or Throttling

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size,...

7.1CVSS5.9AI score0.00402EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•22 views

PT-2026-87147

Name of the Vulnerable Software and Affected Versions MongoDB server affected versions not specified Description A security issue exists in the JSON Pointer parser used during $jsonSchema query filter processing. When a find command contains a specially crafted $jsonSchema filter field, the parse...

7.1CVSS5.9AI score0.00402EPSS
SaveExploits0References8
NVD
NVD
•added 2026/08/17 11:16 a.m.•15 views

CVE-2026-74875

opensslencrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema package or supply unknown metadata format versions to bypass all schema checks and process...

9.8CVSS0.00274EPSS
SaveExploits0References2
PyPA
PyPA
•added 2026/08/17 11:16 a.m.•12 views

PYSEC-2026-3755

opensslencrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema package or supply unknown metadata format versions to bypass all schema checks and process...

9.8CVSS5.8AI score0.00274EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/08/17 11:04 a.m.•34 views

CVE-2026-74875

opensslencrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema package or supply unknown metadata format versions to bypass all schema checks and process...

9.8CVSS5.2AI score0.00274EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/17 11:04 a.m.•22 views

CVE-2026-74875 openssl_encrypt before 1.4.0 Schema Validation Bypass

opensslencrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema package or supply unknown metadata format versions to bypass all schema checks and process...

9.3CVSS5.4AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/17 11:04 a.m.•9 views

CVE-2026-74875 openssl_encrypt before 1.4.0 Schema Validation Bypass

opensslencrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema package or supply unknown metadata format versions to bypass all schema checks and process...

9.8CVSS5.7AI score0.00274EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/17 11:04 a.m.•51 views

CVE-2026-74875 openssl_encrypt before 1.4.0 Schema Validation Bypass

opensslencrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema package or supply unknown metadata format versions to bypass all schema checks and process...

9.8CVSS0.00274EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/17 11:04 a.m.•42 views

CVE-2026-74875

openssl_encrypt (Python package) before 1.4.0 silently skips JSON schema validation when the optional jsonschema library is absent, allowing attackers to remove that package or supply unknown metadata format versions to bypass all schema checks and process malicious data (CVSS 9.8 CRITICAL). No i...

9.8CVSS5.7AI score0.00274EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/08/17 5:49 a.m.•14 views

BIT-MONGODB-2026-13064 MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service

Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected MongoDB deployments, potentially leading to resource exhaustion. The resulting CPU-bound operation cannot be interrupted through standard administrative controls...

7.1CVSS5.9AI score0.00451EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/28 9:48 p.m.•16 views

CVE-2026-54653

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.17.0 until 0.60.2, datamodel-code-generator preserves attacker-controlled defaultfactory values in...

8.8CVSS6AI score0.00711EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder