Beveiligingsadvies

CVE-2026-13066

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-22 19:17:08
Laatst bijgewerkt 2026-07-23 14:23:10
Toegewezen door mongodb
CVSS-score 7.1
Status PUBLISHED

Beschrijving

Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data returned to the client. This constitutes an unintended information disclosure affecting deployments that use server-side JavaScript.