MongoDB Inc libbson

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-0755< 1.27.5MongoDB C Driver bson library may be susceptible to buffer overflowHIGH 8.40.8 %
CVE-2024-6383< 1.27.1MongoDB C Driver bson_string_append may be vulnerable to a buffer overflowMEDIUM 5.30.6 %
CVE-2024-6381< 1.26.2MongoDB C Driver bson_strfreev may be susceptible to integer overflowMEDIUM 5.30.4 %