BSON, a crucial npm package for parsing BSON (Binary JSON) data in both Node.js and browser environments, saw a minor version update from 0.2.11 to 0.2.12. While the core functionality remained consistent, offering developers a reliable way to serialize and deserialize data structures with BSON's efficient binary format, some subtle changes occurred. Both versions shared the same dependencies, relying on "nan" version 1.2.0 for native Node.js addon support and utilizing "one," "gleak," and "nodeunit" for development-related tasks, suggesting a focused effort on maintaining compatibility and stability. The repository information and author details remained unchanged, indicating continuity in ownership and development responsibility.
The key differentiator lies in the release date. Version 0.2.12 was published on August 24, 2014, whereas the previous stable version, 0.2.11, was released on July 31, 2014. This roughly month-long gap suggests that version 0.2.12 likely included bug fixes, performance enhancements, or minor feature additions that warranted a new release. For developers already using BSON, upgrading to version 0.2.12 is recommended to benefit from any improvements or resolutions provided during that period. As a BSON parser, the library is essential for applications dealing with MongoDB databases or any system leveraging the BSON data format for efficient data storage and transmission. Developers can easily integrate it using npm to work with BSON data in their projects.
All the vulnerabilities related to the version 0.2.12 of the package
Deserialization of Untrusted Data in bson
Incorrect parsing of certain JSON input may result in js-bson not correctly serializing BSON. This may cause unexpected application behaviour including data disclosure.
Deserialization of Untrusted Data in bson
All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data. The package will ignore an unknown value for an object's _bsontype, leading to cases where an object is serialized as a document rather than the intended BSON type.
