Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-13507

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8.2 versions prior to 8.2.1.

Published

2025-11-25T05:16:09.090

Last Modified

2025-12-05T20:23:31.947

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-1284
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mongodb mongodb < 7.0.26 Yes
Application mongodb mongodb < 8.0.16 Yes
Application mongodb mongodb < 8.2.1 Yes
References