Vulnerabilities

TI-2026-63846 CVE-2026-96749 · GHSA-v4x9-3549-crwv

Heap out-of-bounds write via signed size overflow in BSON document encoding

LOW 34

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data.

CVSS 4.0HIGH 7.5 Local No auth No interaction EPSS 0.00188 Published 2026-09-24 Partial fix · 4.18.2 CWE-190

TI-2026-63845 CVE-2026-96748 · GHSA-vp6j-j7w5-5xjj

Connection redirection via percent-encoded delimiter injection in connection string hosts

LOW 36

PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00361 Published 2026-09-24 Partial fix · 4.18.2 CWE-177

TI-2026-63844 CVE-2026-96747 · GHSA-qx36-8mw2-4r3x

Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption

LOW 23

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0019 Published 2026-09-24 Partial fix · 4.18.2 CWE-918

Vulnerabilities

Filters

Heap out-of-bounds write via signed size overflow in BSON document encoding

Connection redirection via percent-encoded delimiter injection in connection string hosts

Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption