CVE-2026-112368

A flaw was found in the MongoDB PHP driver. An uncontrolled recursion vulnerability in the Binary JSON BSON decoding logic allows an unauthenticated remote attacker to cause a Denial of Service DoS. By supplying specially crafted binary document data to the decoder, an attacker can exhaust the...