Update dependency pymongo to v4.6.3 [SECURITY] - autoclosed

sarvex / mongo

The Mongo Database

Other

0 stars 0 forks source link

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
pymongo	`4.6.1` -> `4.6.3`
pymongo	`==4.5.0` -> `==4.6.3`

[!WARNING] Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

GitHub Vulnerability Alerts

CVE-2024-21506

Versions of the package pymongo before 4.6.3 are vulnerable to Out-of-bounds Read in the bson module. Using the crafted payload the attacker could force the parser to deserialize unmanaged memory. The parser tries to interpret bytes next to buffer and throws an exception with string. If the following bytes are not printable UTF-8 the parser throws an exception with a single byte.

Release Notes

mongodb/mongo-python-driver (pymongo)

### [`v4.6.3`](https://togithub.com/mongodb/mongo-python-driver/compare/4.6.2...4.6.3) [Compare Source](https://togithub.com/mongodb/mongo-python-driver/compare/4.6.2...4.6.3) ### [`v4.6.2`](https://togithub.com/mongodb/mongo-python-driver/releases/tag/4.6.2): PyMongo 4.6.2 [Compare Source](https://togithub.com/mongodb/mongo-python-driver/compare/4.6.1...4.6.2) Release notes: https://www.mongodb.com/community/forums/t/pymongo-4-6-2-released/267404

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
❌ ACTION	actionlint	2		1	0.11s
⚠️ BASH	bash-exec	354		109	1.47s
❌ BASH	shellcheck	354		4942	84.44s
⚠️ BASH	shfmt	354	313	1	1.04s
❌ COPYPASTE	jscpd	yes		1	5503.8s
❌ CSS	stylelint	6	6	1	3.33s
❌ DOCKERFILE	hadolint	12		1	0.83s
❌ HTML	djlint	38		1	6.03s
❌ HTML	htmlhint	38		2392	1.22s
❌ JAVASCRIPT	eslint	6139	0	1	62.67s
❌ JAVASCRIPT	standard	6139	6115	1	629.1s
❌ JSON	jsonlint	232		1	0.46s
❌ JSON	npm-package-json-lint	yes		1	2.31s
✅ JSON	prettier	232	139	0	5.91s
❌ JSON	v8r	232		1	274.92s
⚠️ MARKDOWN	markdownlint	269	227	1165	21.12s
❌ MARKDOWN	markdown-link-check	269		27	18.57s
✅ MARKDOWN	markdown-table-formatter	269	229	0	2.22s
❌ PROTOBUF	protolint	162	103	3	175.4s
❌ REPOSITORY	checkov	yes		66	233.87s
❌ REPOSITORY	gitleaks	yes		1231	721.04s
❌ REPOSITORY	git_diff	yes		1	5.34s
❌ REPOSITORY	grype	yes		1	17.36s
❌ REPOSITORY	secretlint	yes		1	10029.24s
❌ REPOSITORY	trivy	yes		1	11.99s
✅ REPOSITORY	trivy-sbom	yes		no	2.93s
✅ REPOSITORY	trufflehog	yes		no	66.19s
❌ SPELL	cspell	40760		1122216	21126.62s
❌ SPELL	lychee	5676		1	8.08s
✅ SQL	sql-lint	1		0	0.75s
✅ XML	xmllint	41	0	0	0.68s
⚠️ YAML	prettier	662	512	1	24.07s
❌ YAML	v8r	662		1	485.92s
❌ YAML	yamllint	662		1	22.84s

Descriptor

Linter

Files

Fixed

Errors

Elapsed time

❌ ACTION

actionlint

0.11s

⚠️ BASH

bash-exec

354