Description
Incorrect parsing of certain JSON input may result in js-bson not correctly serializing BSON. This may cause unexpected application behaviour including data disclosure.
Recommendation
Update the bson package to the latest compatible version. Followings are version details:
- Affected version(s): < 1.1.4
- Patched version(s): 1.1.4
References
Could your website be exposed too?
SmartScanner can check your website for Deserialization of Untrusted Data in bson - bson and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Deserialization of Untrusted Data in bson - CVE-2020-7610
- bson-objectid contains Improper input validation - CVE-2019-19729
- Pannellum Cross-Site Scripting due to data not being sanitized for URIs or vbscript - CVE-2019-16763
- TaffyDB can allow access to any data items in the DB - taffy - CVE-2019-10790
You might also like:
See something that needs correcting? Let us knowUpdated June 20, 2023