CVE-2024-5629

A flaw was found in the bson module contained in the python-pymongo package. A malformed BSON file may trigger an exception, leading to a denial of service and eventually sensitive memory data exposure...

edx-enterprise (>=0.40.6, <=0.42.0) potentially affected by CVE-2024-5629 via pymongo (3.5.0)

pymongo PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - edx-enterprise =0.40.6, =0.42.0 Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...

2d6io-cryptobot (0.0.1), almanac-bot (>=0.3.1, <=0.3.2) +19 more potentially affected by CVE-2024-5629 via pymongo (3.5.1)

pymongo PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - 2d6io-cryptobot 0.0.1 - almanac-bot =0.3.1, =0.1.5, =0.1.2a0, =1.1.0, =0.4.11, =1.3.9, =0.43.0, =1.0.0, =1.0.4, =13.0.0, =11.1.0, =0.1.0, =1.0.1,...

adyanutils (>=0.4.2, <=0.8.6), batch-automation (0.0.3) +5 more potentially affected by CVE-2024-5629 via pymongo (3.6.0)

pymongo PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - adyanutils =0.4.2, =0.55.5, =0.62.0 - hanita 0.1.3 - jetengine 0.1.3 - scout-browser 4.1.0 - yy-spider 1.0.0 Source cves: CVE-2024-5629 Source...

capreolus (>=0.1.0, <=0.1.5), ckanext-nhm (>=3.7.1, <=6.9.8) +19 more potentially affected by CVE-2024-5629 via pymongo (3.9.0)

pymongo PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - capreolus =0.1.0, =3.7.1, =3.0.2, =3.7.0, =0.2.0, =0.0.2, =0.0.2, =0.9.2rc1, =0.0.2, =0.1.2, =0.0.1, =0.0.8 and more Source cves: CVE-2024-5629...

auto-qchem (>=0.1.1, <=1.2.6), crsmongo (>=1.0.0, <=1.0.6) +5 more potentially affected by CVE-2024-5629 via pymongo (3.10.0)

pymongo PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - auto-qchem =0.1.1, =1.0.0, =0.1.24, =0.0.1, =0.1.0, =0.1.10, =2.0.7, =2.3.2 Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...

askbob (>=0.0.3, <=0.0.4), autoneuro-pypi (1.0.0) +46 more potentially affected by CVE-2024-5629 via pymongo (3.10.1)

pymongo PYPI version 3.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - askbob =0.0.3, =1.1.0, =1.1.0, =0.0.3, =1.3.7, =0.0.5, =0.0.2, =0.0.0, =0.0.13 - deeppavlov-agent 2.3.0a0 - discord-fate-bot 0.1.1 - dragg 0.0.0 ...

bloomtechlib (0.0.1), cocktail-apikit (>=0.1.20, <=0.1.22) +30 more potentially affected by CVE-2024-5629 via pymongo (3.11.4)

pymongo PYPI version 3.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bloomtechlib 0.0.1 - cocktail-apikit =0.1.20, =0.1.8, =0.0.3, =1.0.0, =0.1.3, =0.1.0, =0.2.1, =1.0.1, =0.11.0, =0.0.23, =1.0.1, =1.0.0, =1.2.5 an...

aiogram-utils (>=0.0.1, <=0.0.3), algorithmic-trader (>=0.0.2, <=0.0.6) +35 more potentially affected by CVE-2024-5629 via pymongo (3.12.0)

pymongo PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - aiogram-utils =0.0.1, =0.0.2, =1.1.1, =1.0.4, =0.11.0, =0.2.1, =0.4.0, =0.2.2, =0.2.5.5, =0.3.4, =1.0.0, =0.1.0, =1.5.2, =0.1.2, =0.1.14 and more...

inmanta (2016.6.0) potentially affected by CVE-2024-5629 via pymongo (2.7.0)

pymongo PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - inmanta 2016.6.0 Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...

amoniak (1.0.2), aws-scripts (>=0.0.20, <=0.1.12) +6 more potentially affected by CVE-2024-5629 via pymongo (2.9.5)

pymongo PYPI version 2.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - amoniak 1.0.2 - aws-scripts =0.0.20, =0.4.2, =2.0.3, =0.1.3, =2.0.0, =2.3.0 Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...

mongoext (>=0.3.0, <=0.4.0) potentially affected by CVE-2024-5629 via pymongo (3.0.0)

pymongo PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mongoext =0.3.0, =0.4.0 Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...

mongodb-migrations (0.1.1), rolabesti (>=0.1.0, <=0.5.3) potentially affected by CVE-2024-5629 via pymongo (3.2.1)

pymongo PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mongodb-migrations 0.1.1 - rolabesti =0.1.0, =0.5.3 Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...

mtaf (>=1.0.28, <=1.0.47) potentially affected by CVE-2024-5629 via pymongo (3.3.1)

pymongo PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mtaf =1.0.28, =1.0.47 Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...

quokka (>=0.0.1.dev84, <=0.4.1.dev22) potentially affected by CVE-2024-5629 via pymongo (2.4.1)

pymongo PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - quokka =0.0.1.dev84, =0.4.1.dev22 Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...

lathermail (>=0.3.1, <=0.4.2) potentially affected by CVE-2024-5629 via pymongo (2.7.1)

pymongo PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - lathermail =0.3.1, =0.4.2 Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...

restart-mongo (>=0.1.0, <=0.1.4) potentially affected by CVE-2024-5629 via pymongo (2.7.2)

pymongo PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - restart-mongo =0.1.0, =0.1.4 Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...

mongoext (>=0.2.0, <=0.2.3), mongoops (>=0.0.1, <=1.0.1) potentially affected by CVE-2024-5629 via pymongo (2.8.0)

pymongo PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mongoext =0.2.0, =0.0.1, =1.0.1 Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...

chatterbot (>=0.2.4, <=0.2.5), monasca-agent (1.1.20) +2 more potentially affected by CVE-2024-5629 via pymongo (3.0.3)

pymongo PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - chatterbot =0.2.4, =0.1.0, =2.2.0 - robotoff 1.0.13 Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...

gakp-pylib (>=0.2.7, <=0.9.3), khan-mongo (0.1.6) +1 more potentially affected by CVE-2024-5629 via pymongo (3.2.2)

pymongo PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - gakp-pylib =0.2.7, =1.3.0, =1.4.0 Source cves: CVE-2024-5629 Source advisory: OSV:GHSA-M87M-MMVP-V9QM...