Skip to content
OpenAdvisories

Package · Ubuntu

ruby-mongo

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.3
    CVE-2026-88030

    GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB Ruby Driver

    Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authentica…

    MongoDB Ruby Driver ruby-mongo ruby-mongo Debian Ubuntu
  • Medium 6.5
    CVE-2026-2302

    Unsafe Reflection in Mongoid::Criteria.from_hash

    Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.

    MongoDB MongoDB Ruby Driver ruby-mongo Ubuntu