CVE-2026-125120

Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.11, 7.8.12, 8.24.3, and 9.9.2, Mongoose countDocuments does not apply the configured sanitizeFilter query selector injection defense. An application that enables sanitizeFilter and passes...