Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#Mongoose

1 articles

Deep Dive

Mongoose NoSQL Injection Bypass, Fixed in 9.11.4 (CVE-2026-125120)

Mongoose applies sanitizeFilter unevenly, so attacker-controlled filters reach countDocuments and connection-level queries; fixed in 9.11.4.

Ostorlab Team
Nov 11, 2026