Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: MongoDB Laravel MongoDB (PHP) 5.11.0 Clear all filters
TI-2026-60053 CVE-2026-88028 · GHSA-3jwc-jjcp-mq77

Unauthorized document disclosure via query-operator injection in polymorphic relation…

Priority LOW 32

Improper neutralization of special elements in data query logic in the polymorphic relation handling of the MongoDB integration for Laravel can cause a caller-supplied relation identifier to be interpreted as a query con…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00421 Published 2026-09-10 Fixed in 5.11.0 CWE-943
TI-2026-60052 CVE-2026-88027 · GHSA-hm9m-cvww-9ffq

Mass deletion and overwrite of embedded documents via query-operator injection in…

Priority LOW 31

Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoDB integration for Laravel can cause a caller-supplied embedded record identifier to be interpreted a…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00267 Published 2026-09-10 Fixed in 5.11.0 CWE-943