reports/GO-2021-0111.yaml [3:11]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
versions:
  - fixed: v1.5.1
description: |
    Due to improper input sanitization when marshalling Go objects into BSON, a maliciously constructed
    Go structure could allow an attacker to inject additional fields into a MongoDB document. Users are
    affected if they use this package to handle untrusted user input.
cves:
  - CVE-2021-20329
symbols:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



reports/GO-2021-0112.yaml [3:11]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
versions:
  - fixed: v1.5.1
description: |
    Due to improper input sanitization when marshalling Go objects into BSON, a maliciously constructed
    Go structure could allow an attacker to inject additional fields into a MongoDB document. Users are
    affected if they use this package to handle untrusted user input.
cves:
  - CVE-2021-20329
symbols:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



