CVE-2020-7610
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-7610
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-7610.json
- Aliases
-
- GHSA-v8w9-2789-6hhr
- SNYK-JS-BSON-561052
- Published
- 2020-03-30T19:15:17Z
- Modified
- 2023-11-29T08:35:31.207761Z
- Details
-
All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data. The package will ignore an unknown value for an object's _bsotype, leading to cases where an object is serialized as a document rather than the intended BSON type.
- References