Skip to content
OpenAdvisories

Product · MongoDB

MongoDB Ruby Driver

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-2302

    Unsafe Reflection in Mongoid::Criteria.from_hash

    Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.

    MongoDB MongoDB Ruby Driver ruby-mongo Ubuntu