Threats tagged 'ghsa-48g7-vc36-5wgx'

A vulnerability in the BSON serialization component allows bypassing a type-restriction control due to an overly permissive heuristic used to identify compiler-generated types. This flaw enables an attacker who can supply BSON content to cause the deserialization of types outside the intended allow-list, potentially leading to unexpected object states and errors in application logic. Exploitation requires only the ability to influence the deserialization input and does not require elevated privileges.