https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:17:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-373109 EUVD-2026-373109 https://cve.radiocsirt.org/vuln/euvd-2026-373109 https://cve.radiocsirt.org/vuln/fkie_cve-2026-93760 <p>Mongoid does not restrict which query operators may come from caller-supplied filter data when an application hands that data to its query-building methods. In an application that forwards externally supplied filter parameters in this way, a party with no credentials may influence how the database evaluates the query. This may result in unintended disclosure of stored field values and in reduced database performance.</p> <p>Mongoid does not restrict which query operators may come from caller-supplied filter data when an application hands that data to its query-building methods. In an application that forwards externally supplied filter parameters in this way, a party with no credentials may influence how the database evaluates the query. This may result in unintended disclosure of stored field values and in reduced database performance.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-93760 https://cve.radiocsirt.org/vuln/ghsa-mm58-qxpf-v4c7 <p>Mongoid does not restrict which query operators may come from caller-supplied filter data when an application hands that data to its query-building methods. In an application that forwards externally supplied filter parameters in this way, a party with no credentials may influence how the database evaluates the query. This may result in unintended disclosure of stored field values and in reduced database performance.</p> <p>Mongoid does not restrict which query operators may come from caller-supplied filter data when an application hands that data to its query-building methods. In an application that forwards externally supplied filter parameters in this way, a party with no credentials may influence how the database evaluates the query. This may result in unintended disclosure of stored field values and in reduced database performance.</p> https://cve.radiocsirt.org/vuln/ghsa-mm58-qxpf-v4c7