Get real-time updates on Telegram

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding

CVE-2026-96749 affects pymongo. CVSS base score 8.4 (GitHub Advisory Database). EPSS 0.00132 (percentile 0.02348), scored 2026-10-04. Affected range: < 4.18.2. Fixed version: 4.18.2.

Published 2026-10-06 00:14:26.784564+00:00

CVE

CVE-2026-96749

Product

pymongo

CCR priority

33.6 /100 (P4)

CVSS

8.4 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · GitHub Advisory Database

EPSS

0.00132 · percentile 0.02348 · 2026-10-04

KEV

no

Affected products

• pymongo · < 4.18.2 · Fixed version: 4.18.2

Provenance

• GitHub Advisory Database · Source record · observed 2026-10-06 00:14:20.210633+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-96749.html