bson project vulnerabilities

Products

• bson 1

Latest bson project CVEs

Newest publication first

1. CVE-2015-4412 bson is vulnerable to denial of service due to incorrect regex validation

   Published 2018-02-05

   Critical·CVSS 9.8 EPSS 4.7% PoC

   BSON injection vulnerability in the legal? function in BSON (bson-ruby) gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service (resource consumption) or inject arbitrary data via a crafted string.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.