| Package | Affected versions | Patched versions |
|---|---|---|
| c driver | < 0.8 | 0.8 |
| whoopsie | ≤ 0.2.69 |
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free