CVE-2026-118510 Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs

A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the absence of a related record to be compiled with an identifier of the wrong data type. In an application that relies on such a check to decide which documents a request may see or...

CVE-2026-118510

The laravel-mongodb integration library contains a type-handling flaw in its relationship query building, specifically affecting the whereDoesntHave method. The root cause is a type confusion issue where the library may compile a check for the absence of a related record using an identifier of th...