BIT-MONGOOSE-2024-53900

Mongoose before 8.8.3 can improperly use $where in match, leading to search injection...