Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wvx7-gr2m-7rf5

Опубликовано: 22 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 9.2
CVSS3: 8.1

Описание

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default and requires explicit enablement at startup.

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default and requires explicit enablement at startup.

EPSS

Процентиль: 24%
0.00315
Низкий

9.2 Critical

CVSS4

8.1 High

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 1 месяца назад

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default and requires explicit enablement at startup.

CVSS3: 8.1
nvd
около 1 месяца назад

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default and requires explicit enablement at startup.

CVSS3: 8.1
debian
около 1 месяца назад

When compute mode is enabled on a standalone mongod instance, insuffic ...

EPSS

Процентиль: 24%
0.00315
Низкий

9.2 Critical

CVSS4

8.1 High

CVSS3

Дефекты

CWE-122