CVE-2013-2132: bson/_cbsonmodule.c in the mongo-python-driver (aka.

Security readout for executives and security teams

This CVE is a denial-of-service flaw in the Python MongoDB driver, PyMongo, before 2.5.2. If an affected application decodes a malformed DBRef, the native BSON extension can crash. The business impact is service interruption, not data theft based on the provided sources. Exposure is most likely in legacy Python services using PyMongo before 2.5.2, especially where BSON or DBRef data can originate from users, external systems, queues, or stored untrusted content. Prioritize remediation for internet-facing or partner-facing services that use legacy PyMongo and process external BSON-like data. For modern stacks, this is mainly a hygiene item to verify dependency age and vendor patch status. Mitigation focus: Upgrade PyMongo/mongo-python-driver to 2.5.2 or later where applicable.; Apply relevant Debian, Ubuntu, or openSUSE security updates for packaged deployments.; Review vendor guidance before changing unsupported legacy application stacks..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.