Product by Mongodb Inc.
Mongoid
8 known vulnerabilities in Mongoid (Mongodb Inc.), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-93762 | Data deletion and attribute disclosure via field-name method injection in in-memory queries | 9.8 | |
| Critical | CVE-2026-93765 | Document deletion and process crash via unvalidated method-name dispatch in atomic pop operation | 9.1 | |
| High | CVE-2026-93760 | NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guard | 8.2 | |
| High | CVE-2026-93761 | Denial of service via unbounded regex matching in Mongoid's in-memory query matcher | 7.5 | |
| High | CVE-2026-93759 | Server-side JavaScript injection via string query criteria bypassing the strict operator allowlist | 8.6 | |
| High | CVE-2026-93758 | Cross-principal document update, theft, and deletion via unvalidated id in nested attributes | 8.1 | |
| High | CVE-2026-93763 | Silent plaintext persistence via unresolved callable database name in encryption schema map | 6.5 | |
| High | CVE-2026-93764 | Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation | 6.5 |