CVE-2025-40906 | MongoDB BSON-XS up to 0.8.4 on Perl libbson vulnerable third-party component

A vulnerability, which was classified as critical, was found in MongoDB BSON-XS up to 0.8.4 on Perl. Affected is an unknown function of the component libbson. The manipulation leads to dependency on vulnerable third-party component. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is traded as CVE-2025-40906. The attack can only be done within the local network. There is no exploit available.