Skip to content
OpenAdvisories

Product · MongoDB

Laravel MongoDB (PHP)

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-88028

    Unauthorized document disclosure via query-operator injection in polymorphic relation identifiers in MongoDB integration for Laravel

    Improper neutralization of special elements in data query logic in the polymorphic relation handling of the MongoDB integration for Laravel can cause a caller-supplied relation identifier to be interpreted as a query condition rather than as a literal identif…

    MongoDB Laravel MongoDB (PHP)