- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 1 medium
- Registry
- npm
Advisories 3
- CVE-2019-2391Medium 4.2
JS-bson may incorrectly serialise some requests
Affected: fixed in 1.1.4.
- CVE-2020-7610Unrated
All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data.
Affected: fixed in 1.1.4.
- CVE-2018-13863Unrated
The MongoDB bson JavaScript module (also known as js-bson) versions 0.5.0 to 1.0.x before 1.0.5 is vulnerable to a Regular Expression…
Affected: from 0.5.0, fixed in 1.0.5.