CVE-2026-93759

A flaw was found in Mongoid where it fails to properly neutralize string-typed query criteria. This vulnerability allows an unauthenticated attacker to inject server-side JavaScript expressions into database queries. Successful exploitation can lead to the unintended disclosure of sensitive store...