Approved changes feed: RSS · Atom

cpe:2.3:a:mongodb:mongodb:8.0.0:*:*:*:-:*:*:*

part: a version: 8.0.0 update: *

VendorMongodb (1aa156a6-63a9-5032-baaf-10197d408a1e)
ProductMongodb (fa9f1f9b-0cc9-5830-a189-b908276ac432)
Edition*
Language*
Software edition-
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mongodb purl2cpe 2026-06-01 10:11:17.970759
pkg:deb/ubuntu/mongodb purl2cpe 2026-06-01 10:11:17.970760
pkg:github/mongodb/mongo purl2cpe 2026-06-01 10:11:17.970762

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0755 vulnerable 2026-06-03 14:58:32.917822 MongoDB C Driver bson library may be susceptible to buffer overflow
HIGH (8.4)
The various bson_append functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size (INT32_MAX), resulting in a segmentation fault and possible application crash. This issue affected libbson versions prior to 1.27.5, MongoDB Server v8.0 versions prior to 8.0.1 and MongoDB Server v7.0 versions prior to 7.0.16
Published: 2025-03-18T09:01:04.793Z
Updated: 2025-11-03T19:35:09.738Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.