Oracle Linux 8 : python36:3.6 (ELSA-2026-82858)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-82858 advisory. - Fix CVE-2021-27291: ReDos via crafted malicious input Resolves: rhbz1943459 rhbz1943460 python-pymongo - Backport CVE-2026-88029 python-PyMySQL - Security fi...

python36:3.6 security update

python36 3.6.8-39 - Provide /usr/bin/python3 explicitly - Resolves: RHEL-2113 python-distro 1.4.0-2 - Port from Fedora to RHEL8, part of the python36 module - Resolves: rhbz1678920 python-docs 3.6.7-2 - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz1695587 python-docutils...

Important: python-pymongo

Issue Overview: A flaw was found in pymongo. An integer overflow exists in the bundled native extension for Binary JSON BSON document encoding when processing an unusually large amount of data. An unprivileged attacker who can submit oversized data to an application for encoding can trigger an...

AZL-107129 CVE-2026-106435 affecting package python-pymongo 4.2.0-9

The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...

SUSE SLES15 Security Update : python-pymongo (SUSE-SU-2026:4398-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4398-1 advisory. - CVE-2026-96747: improper handling of key management endpoint values ending in .sock allows users with write access to the encryption key...

openSUSE 16 Security Update : python-pymongo (openSUSE-SU-2026:22003-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22003-1 advisory. Changes in python-pymongo: - CVE-2026-96749: integer overflow in BSON document encoding allows an unprivileged user to write outside the bounds ...

Rocky Linux 8.6 [CIQ] Security Update: python2-bson / python2-bson-debuginfo / python2-pymongo / etc Multiple Vulnerabilities (ciqsa-2026_0159)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260159 advisory. This advisory aggregates security fixes for the python-pymongo SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2013-7440, CVE-2015-20107, CVE-2023-32681,...

Rocky Linux 8 [CIQ] Security Update: python-nose-docs / python-pymongo-debuginfo / etc (crlsa-2025_8419)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20258419 advisory. python-pymongo: Out-of-bounds read in bson module CVE-2024-5629 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

OPENSUSE-SU-2026:22003-1 Security update for python-pymongo

This update for python-pymongo fixes the following issues: Changes in python-pymongo: - CVE-2026-96749: integer overflow in BSON document encoding allows an unprivileged user to write outside the bounds of an allocated buffer bsc1282845 - CVE-2026-96748: host injection in connection string leadin...

Security update for python-pymongo

This update for python-pymongo fixes the following issues: CVE-2026-96747: improper handling of key management endpoint values ending in .sock allows users with write access to the encryption key metadata to open connections to local sockets on the application host bsc1282844. CVE-2026-96748: hos...

SUSE-SU-2026:4398-1 Security update for python-pymongo

This update for python-pymongo fixes the following issues: - CVE-2026-96747: improper handling of key management endpoint values ending in .sock allows users with write access to the encryption key metadata to open connections to local sockets on the application host bsc1282844. - CVE-2026-96748:...

Important: python-pymongo

Issue Overview: Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can...

AZL-105113 CVE-2026-96747 affecting package python-pymongo 4.2.0-9

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...

AZL-105107 CVE-2026-96748 affecting package python-pymongo 4.2.0-9

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a connection string, that party may cause additional servers of the...

AZL-105110 CVE-2026-96749 affecting package python-pymongo 4.2.0-9

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

Fedora: Security Advisory (FEDORA-2025-a8701ff7cf)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-21506 affecting package python-pymongo for versions less than 4.2.0-9

CVE-2024-21506 affecting package python-pymongo for versions less than 4.2.0-9. An upgraded version of the package is available that resolves this issue...

OPENSUSE-SU-2024:10226-1 python-pymongo-3.1.1-1.5 on GA media

These are all security issues fixed in the python-pymongo-3.1.1-1.5 package on the GA media of openSUSE Tumbleweed...

openSUSE Security Advisory (SUSE-SU-2024:1571-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : python-pymongo (SUSE-SU-2024:1571-2)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1571-2 advisory. - CVE-2024-21506: Fixed out-of-bounds read in the BSON module bsc1222492 Tenable has extracted the preceding description block directly fr...