MongoDB Inc MongoDB Ruby Driver vulnerabilities (CVE)

CVE records published for MongoDB Inc MongoDB Ruby Driver, newest first. Follow to get an email when a new one appears.

1 results

6.5Medium

CVE-2026-2302 9 months ago

Unsafe Reflection in Mongoid::Criteria.from_hash

MongoDB Inc MongoDB Ruby Driver

Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.