ROOT-APP-PYPI-CVE-2026-96749 CVE-2026-96749 in pymongo - Patched by Root

Root has patched CVE-2026-96749 in the pymongo package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-96748 CVE-2026-96748 in pymongo - Patched by Root

Root has patched CVE-2026-96748 in the pymongo package for Root:PyPI. Multiple fixed versions available...

CLSA-2026-1792396649 TuxCare security update for pymongo (2 CVEs)

TuxCare rebuilt pymongo to address 2 CVEs. Fixed in 3.13.0.post2+tuxcare...

MiracleLinux 8 : python36:3.6 (AXSA:2026-2086:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2086:01 advisory. pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection CVE-2026-88029 Tenable has extracted the preceding...

Oracle Linux 8 : python36:3.6 (ELSA-2026-82858)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-82858 advisory. - Fix CVE-2021-27291: ReDos via crafted malicious input Resolves: rhbz1943459 rhbz1943460 python-pymongo - Backport CVE-2026-88029 python-PyMySQL - Security fi...

capreolus (>=0.1.0, <=0.1.5), ckanext-nhm (>=3.7.1, <=6.9.8) +19 more potentially affected by CVE-2026-96749 via pymongo (3.9.0)

pymongo PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - capreolus =0.1.0, =3.7.1, =3.0.2, =3.7.0, =0.2.0, =0.0.2, =0.0.2, =0.9.2rc1, =0.0.2, =0.1.2, =0.0.1, =0.0.8 and more Source cves: CVE-2026-96749...

mongoext (>=0.3.0, <=0.4.0) potentially affected by CVE-2026-96749 via pymongo (3.0.0)

pymongo PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mongoext =0.3.0, =0.4.0 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

lathermail (>=0.3.1, <=0.4.2) potentially affected by CVE-2026-96749 via pymongo (2.7.1)

pymongo PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - lathermail =0.3.1, =0.4.2 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

2d6io-cryptobot (0.0.1), almanac-bot (>=0.3.1, <=0.3.2) +19 more potentially affected by CVE-2026-96749 via pymongo (3.5.1)

pymongo PYPI version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - 2d6io-cryptobot 0.0.1 - almanac-bot =0.3.1, =0.1.5, =0.1.2a0, =1.1.0, =0.4.11, =1.3.9, =0.43.0, =1.0.0, =1.0.4, =13.0.0, =11.1.0, =0.1.0, =1.0.1,...

airvue-gn (>=0.0.1, <=0.0.2), ax-env (>=0.2.2, <=0.3.0) +22 more potentially affected by CVE-2026-96749 via pymongo (3.12.3)

pymongo PYPI version 3.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - airvue-gn =0.0.1, =0.2.2, =0.1.0, =0.1.12, =0.1.12, =0.1.21, =0.3.2, =0.1.0.dev1, =1.1.0b37, =3.1.1, =0.0.11, =0.0.12 and more Source cves:...

academic-metrics (>=0.1.0b0, <=1.0.99), accomate (>=1.0.4, <=2.0.0.6) +807 more potentially affected by CVE-2026-96749 via pymongo (>=4.0.0, <=4.18.1)

pymongo PYPI version =4.0.0, =0.1.0b0, =1.0.4, =0.9.0, =0.3.0, =0.1.0, =0.1.23, =0.22.0, =0.3.0, =0.2.0, =0.1.0, =0.8.1 - aind-metadata-mapper 0.12.4 - aind-metadata-mcp 0.1.0 and more Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

auto-qchem (>=0.1.1, <=1.2.6), crsmongo (>=1.0.0, <=1.0.6) +5 more potentially affected by CVE-2026-96749 via pymongo (3.10.0)

pymongo PYPI version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - auto-qchem =0.1.1, =1.0.0, =0.1.24, =0.0.1, =0.1.0, =0.1.10, =2.0.7, =2.3.2 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

quokka (>=0.0.1.dev84, <=0.4.1.dev22) potentially affected by CVE-2026-96749 via pymongo (2.4.1)

pymongo PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - quokka =0.0.1.dev84, =0.4.1.dev22 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

ansible-mongodb-store (>=0.1.0, <=0.3.0), bson-extra (0.0.4) +6 more potentially affected by CVE-2026-96749 via pymongo (3.12.2)

pymongo PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - ansible-mongodb-store =0.1.0, =1.0.0, =1.0.0, =1.0.0, =0.15.2, =0.1.1, =0.2.14 - ss-daily-tools 1.0.0 Source cves: CVE-2026-96749 Source advisory...

chatterbot (>=0.2.4, <=0.2.5), monasca-agent (1.1.20) +2 more potentially affected by CVE-2026-96749 via pymongo (3.0.3)

pymongo PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - chatterbot =0.2.4, =0.1.0, =2.2.0 - robotoff 1.0.13 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

sd-python-wrapper (>=0.1.2, <=0.1.26) potentially affected by CVE-2026-96749 via pymongo (3.2.0)

pymongo PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - sd-python-wrapper =0.1.2, =0.1.26 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

autotm (>=0.2.3.2, <=0.2.3.4), bolinette (>=0.7.7, <=0.10.0) +10 more potentially affected by CVE-2026-96749 via pymongo (3.11.3)

pymongo PYPI version 3.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - autotm =0.2.3.2, =0.7.7, =0.3.2, =2.0.34, =2.0.3, =0.1.0, =0.0.2, =0.1.19, =0.1.11, =0.1.33 Source cves: CVE-2026-96749 Source advisory:...

inmanta (2016.6.0) potentially affected by CVE-2026-96749 via pymongo (2.7.0)

pymongo PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - inmanta 2016.6.0 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

restart-mongo (>=0.1.0, <=0.1.4) potentially affected by CVE-2026-96749 via pymongo (2.7.2)

pymongo PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - restart-mongo =0.1.0, =0.1.4 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

edx-enterprise (>=0.40.6, <=0.42.0) potentially affected by CVE-2026-96749 via pymongo (3.5.0)

pymongo PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - edx-enterprise =0.40.6, =0.42.0 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...