We are pleased to announce the 4.18.2 release of PyMongo - MongoDB’s Python Driver.
Changes in 4.18.2
Version 4.18.2 is a bug fix release.
-
Hardened the bson buffer size guard against signed integer overflow. (CVE-2026-96749)
-
Fixed connection string parsing to percent-decode each host individually. (CVE-2026-96748)
-
Client-side field level encryption now rejects a KMS endpoint ending in
.sock. (CVE-2026-96747)
Issues Resolved
See the PyMongo 4.18.2 release notes in JIRA for the list of resolved issues in this release.