https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:36:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-375342 EUVD-2026-375342 https://cve.radiocsirt.org/vuln/euvd-2026-375342 https://cve.radiocsirt.org/vuln/fkie_cve-2026-96744 <p>Improper neutralization of special elements in data query logic in the cache lock implementation of the MongoDB integration for Laravel can cause a caller-supplied lock owner value to be evaluated as an aggregation expression rather than as a literal value. An authenticated user who can influence the owner value an application uses when acquiring or restoring a lock may take over or prematurely expire a lock held by another process, which can lead to duplicated or conflicting operations.</p> <p>Improper neutralization of special elements in data query logic in the cache lock implementation of the MongoDB integration for Laravel can cause a caller-supplied lock owner value to be evaluated as an aggregation expression rather than as a literal value. An authenticated user who can influence the owner value an application uses when acquiring or restoring a lock may take over or prematurely expire a lock held by another process, which can lead to duplicated or conflicting operations.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-96744 https://cve.radiocsirt.org/vuln/ghsa-vm72-96wq-2ppv <p>Improper neutralization of special elements in data query logic in the cache lock implementation of the MongoDB integration for Laravel can cause a caller-supplied lock owner value to be evaluated as an aggregation expression rather than as a literal value. An authenticated user who can influence the owner value an application uses when acquiring or restoring a lock may take over or prematurely expire a lock held by another process, which can lead to duplicated or conflicting operations.</p> <p>Improper neutralization of special elements in data query logic in the cache lock implementation of the MongoDB integration for Laravel can cause a caller-supplied lock owner value to be evaluated as an aggregation expression rather than as a literal value. An authenticated user who can influence the owner value an application uses when acquiring or restoring a lock may take over or prematurely expire a lock held by another process, which can lead to duplicated or conflicting operations.</p> https://cve.radiocsirt.org/vuln/ghsa-vm72-96wq-2ppv https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3583 <p>Ein Angreifer kann mehrere Schwachstellen in verschiedenen MongoDB Treibern (Python Driver, PHP Driver, C Driver, Compass und Laravel) ausnutzen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um beliebigen Programmcode auszuführen und um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in verschiedenen MongoDB Treibern (Python Driver, PHP Driver, C Driver, Compass und Laravel) ausnutzen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um beliebigen Programmcode auszuführen und um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3583