https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:43:13 +0000 https://cve.radiocsirt.org/vuln/certfr-2021-avi-457 certfr-2021-avi-457 https://cve.radiocsirt.org/vuln/certfr-2021-avi-457 https://cve.radiocsirt.org/vuln/cnvd-2021-42142 cnvd-2021-42142 https://cve.radiocsirt.org/vuln/cnvd-2021-42142 https://cve.radiocsirt.org/vuln/euvd-2026-175032 EUVD-2026-175032 https://cve.radiocsirt.org/vuln/euvd-2026-175032 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20329 <p>Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents. This issue affects all MongoDB GO Drivers prior to and including 1.5.0.</p> <p>Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents. This issue affects all MongoDB GO Drivers prior to and including 1.5.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-20329 https://cve.radiocsirt.org/vuln/ghsa-f6mq-5m25-4r72 <p><strong>Affected:</strong> Go: go.mongodb.org/mongo-driver</p> <p>Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents. This issue affects all MongoDB GO Drivers up to (and including) 1.5.0.</p> <p><strong>Affected:</strong> Go: go.mongodb.org/mongo-driver</p> <p>Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents. This issue affects all MongoDB GO Drivers up to (and including) 1.5.0.</p> https://cve.radiocsirt.org/vuln/ghsa-f6mq-5m25-4r72 https://cve.radiocsirt.org/vuln/gsd-2021-20329 gsd-2021-20329 https://cve.radiocsirt.org/vuln/gsd-2021-20329 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15764-1 <p>etcd-for-k8s1.32-3.5.24-1.1 on GA media</p> <p>etcd-for-k8s1.32-3.5.24-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15764-1 https://cve.radiocsirt.org/vuln/rhsa-2023:1326 <p>go-yaml: Denial of Service in go-yaml goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be mongo-go-driver: specific cstrings input may not be properly validated golang: out-of-bounds read in golang.org/x/text/language leads to DoS prometheus/client_golang: Denial of service using InstrumentHandlerCounter helm: Denial of service through through repository index file helm: Denial of service through schema file golang: crash in a golang.org/x/crypto/ssh server vault: insufficient certificate revocation list checking golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests x/net/http2/h2c: request smuggling golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding golang: crypto/tls: large handshake records may cause panics golang: net/http, mime/multipart: denial of service from excessive resource consumption exporter-toolkit: authentication bypass via cache poisoning vault: Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File hashicorp/vault: Vault’s PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata hashicorp/vault: Cache-Timing Attacks During Seal and Unseal Operations helm: getHostByName Function Information Disclosure containerd: Supplementary groups are not set up properly runc: Rootless runc makes `/sys/fs/cgroup` writable runc: volume mount race condition (regression of CVE-2019-19921) runc: AppArmor can be bypassed when `/pro…</p> <p>go-yaml: Denial of Service in go-yaml goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be mongo-go-driver: specific cstrings input may not be properly validated golang: out-of-bounds read in golang.org/x/text/language leads to DoS prometheus/client_golang: Denial of service using InstrumentHandlerCounter helm: Denial of service through through repository index file helm: Denial of service through schema file golang: crash in a golang.org/x/crypto/ssh server vault: insufficient certificate revocation list checking golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests x/net/http2/h2c: request smuggling golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding golang: crypto/tls: large handshake records may cause panics golang: net/http, mime/multipart: denial of service from excessive resource consumption exporter-toolkit: authentication bypass via cache poisoning vault: Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File hashicorp/vault: Vault’s PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata hashicorp/vault: Cache-Timing Attacks During Seal and Unseal Operations helm: getHostByName Function Information Disclosure containerd: Supplementary groups are not set up properly runc: Rootless runc makes `/sys/fs/cgroup` writable runc: volume mount race condition (regression of CVE-2019-19921) runc: AppArmor can be bypassed when `/pro…</p> https://cve.radiocsirt.org/vuln/rhsa-2023:1326 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20329 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: mongodb, Ubuntu:16.04:LTS: mongodb, Ubuntu:18.04:LTS: mongodb, Ubuntu:20.04:LTS: mongodb</p> <p>Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents. This issue affects all MongoDB GO Drivers prior to and including 1.5.0.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: mongodb, Ubuntu:16.04:LTS: mongodb, Ubuntu:18.04:LTS: mongodb, Ubuntu:20.04:LTS: mongodb</p> <p>Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents. This issue affects all MongoDB GO Drivers prior to and including 1.5.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20329 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0765 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in MongoDB ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in MongoDB ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0765