Product
A type allow-list bypass in the MongoDB C# Driver BSON serialization library permits the instantiation of unauthorized .NET types during deserialization, potentially leading to arbitrary code execution if suitable gadget types are present.