agentprime: mongodb-inc-mongoidEvery new CVE for mongodb-inc-mongoid.https://agentprime.io/CVE-2026-93759: Server-side JavaScript injection via string query criteria bypassing the strict operator allowlisthttps://agentprime.io/advisories/CVE-2026-93759/https://agentprime.io/advisories/CVE-2026-93759/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 17:27:51 GMTCVECVE-2026-93760: NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guardhttps://agentprime.io/advisories/CVE-2026-93760/https://agentprime.io/advisories/CVE-2026-93760/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 17:24:03 GMTCVECVE-2026-93761: Denial of service via unbounded regex matching in Mongoid's in-memory query matcherhttps://agentprime.io/advisories/CVE-2026-93761/https://agentprime.io/advisories/CVE-2026-93761/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 17:20:34 GMTCVECVE-2026-93762: Data deletion and attribute disclosure via field-name method injection in in-memory querieshttps://agentprime.io/advisories/CVE-2026-93762/https://agentprime.io/advisories/CVE-2026-93762/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 17:15:17 GMTCVEcriticalCVE-2026-93763: Silent plaintext persistence via unresolved callable database name in encryption schema maphttps://agentprime.io/advisories/CVE-2026-93763/https://agentprime.io/advisories/CVE-2026-93763/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 17:10:24 GMTCVECVE-2026-93764: Plaintext storage of encrypted fields via skipped embedded models in encryption schema generationhttps://agentprime.io/advisories/CVE-2026-93764/https://agentprime.io/advisories/CVE-2026-93764/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 17:06:27 GMTCVECVE-2026-93765: Document deletion and process crash via unvalidated method-name dispatch in atomic pop operationhttps://agentprime.io/advisories/CVE-2026-93765/https://agentprime.io/advisories/CVE-2026-93765/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 17:01:09 GMTCVECVE-2026-93758: Cross-principal document update, theft, and deletion via unvalidated id in nested attributeshttps://agentprime.io/advisories/CVE-2026-93758/https://agentprime.io/advisories/CVE-2026-93758/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 16:56:41 GMTCVE