CVE-2026-126982

A type allow-list bypass in the BSON serialization library of the MongoDB C Driver allows a type-restriction check to be circumvented when polymorphic data is deserialized into loosely typed members. An unauthorized party who can supply or plant BSON/JSON data that the application later...

EUVD-2026-124807

A type allow-list bypass in the BSON serialization library of the MongoDB C Driver allows a type-restriction check to be circumvented when polymorphic data is deserialized into loosely typed members. An unauthorized party who can supply or plant BSON/JSON data that the application later...

PT-2026-146100

A type allow-list bypass in the BSON serialization library of the MongoDB C Driver allows a type-restriction check to be circumvented when polymorphic data is deserialized into loosely typed members. An unauthorized party who can supply or plant BSON/JSON data that the application later...