MongoDB

PHP object injection via unsuppressible __pclass class inference in command monitoring events

Heap buffer overflow via mid-scan command list growth in client topology monitoring

Shell script injection via server-supplied database name in Open MongoDB shell

Server-side JavaScript injection via string query criteria bypassing the strict operator allowlist

NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guard

Denial of service via unbounded regex matching in Mongoid's in-memory query matcher

Data deletion and attribute disclosure via field-name method injection in in-memory queries

Silent plaintext persistence via unresolved callable database name in encryption schema map

Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation

Document deletion and process crash via unvalidated method-name dispatch in atomic pop operation