Description
Incorrect parsing of certain JSON input may result in js-bson not correctly serializing BSON. This may cause unexpected application behaviour including data disclosure. This issue affects: MongoDB Inc. js-bson library version 1.1.3 and prior to.
Remediation
References
https://github.com/mongodb/js-bson/releases/tag/v1.1.4
Related Vulnerabilities
CVE-2021-32662 Vulnerability in npm package techdocs-common
CVE-2018-19048 Vulnerability in maven package org.webjars:simditor
CVE-2021-41532 Vulnerability in maven package org.apache.ozone:ozone-recon
CVE-2012-4534 Vulnerability in maven package org.apache.tomcat:tomcat-coyote
CVE-2016-4216 Vulnerability in maven package com.adobe.xmp:xmpcore