Vulnerabilities for pymongo

First version without a known vulnerability: 4.18.2

Details

• GHSA-v4x9-3549-crwv2026-10-05

  PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding

  Fixed in: 4.18.2

• GHSA-vp6j-j7w5-5xjj2026-10-05

  PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimiters

  Fixed in: 4.18.2

• GHSA-qx36-8mw2-4r3x2026-10-05

  PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption

  Fixed in: 4.18.2

• GHSA-8fvv-fgr5-f8ch2026-10-05

  pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods

  Fixed in: 4.18.1

• GHSA-m87m-mmvp-v9qm2024-06-05

  PyMongo Out-of-bounds Read in the bson module

  Fixed in: 4.6.3

• GHSA-x33v-f3gp-gw2c2022-05-14

  Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo

  Fixed in: 2.5.2, a060c15ef87e0f0e72974c7c0e57fe811bbd06a2