Mongodb Mongoid vulnerabilities

• mongodb mongoid Server-side JavaScript injection via string query criteria bypassing the strict operator allowlist CVE-2026-93759 8.8 HighSeptember 18, 2026
• mongodb mongoid NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guard CVE-2026-93760 8.3 HighSeptember 18, 2026
• mongodb mongoid Denial of service via unbounded regex matching in Mongoid's in-memory query matcher CVE-2026-93761 8.7 HighSeptember 18, 2026
• mongodb mongoid Data deletion and attribute disclosure via field-name method injection in in-memory queries CVE-2026-93762 9.2 CriticalSeptember 18, 2026
• mongodb mongoid Silent plaintext persistence via unresolved callable database name in encryption schema map CVE-2026-93763 7.1 HighSeptember 18, 2026
• mongodb mongoid Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation CVE-2026-93764 7.1 HighSeptember 18, 2026
• mongodb mongoid Document deletion and process crash via unvalidated method-name dispatch in atomic pop operation CVE-2026-93765 8.3 HighSeptember 18, 2026
• mongodb mongoid Cross-principal document update, theft, and deletion via unvalidated id in nested attributes CVE-2026-93758 8.6 HighSeptember 18, 2026