Threats tagged 'brew-mongo-orchestration-cve-2026-96749'

CVE-2026-96749 is a high-severity integer overflow vulnerability in the BSON document encoding component of the MongoDB Python Driver's native extension. It occurs when encoding a single document constructed from a very large amount of data, causing signed 32-bit size arithmetic to overflow. This can lead to a heap out-of-bounds write inside the application's process memory. The flaw affects mongo-orchestration versions from 0.5 up to but not including 0.11.2_4. A fix is available in version 0.11.2_4.