CVE-2026-93760

Mongoid , the Ruby ODM for MongoDB, allows caller-supplied filter data to carry unrestricted query operators when an application forwards externally supplied parameters to its query-building methods. Because the operator guard is unsafe by default , an unauthenticated party can influence how the ...