CVE-2026-126982

A type allow-list bypass in the BSON serialization library of the MongoDB C Driver allows a type-restriction check to be circumvented when polymorphic data is deserialized into loosely typed members. An unauthorized party who can supply or plant BSON/JSON data that the application later...