Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

MongoDB Mongoose Discriminator Bypasses Schema Validation Causing Collection Poisoning (CWE-20)

github.com 2026-11-10 English translation pending; showing Chinese 查看中文 →
Security Advisory High MongoDB
Affected:
  • MongoDB 4.0.12 - 4.0.24
  • MongoDB 4.2.1 - 4.2.17
  • MongoDB 4.4.0 - 4.4.10
  • MongoDB 5.0.0 - 5.0.13
Fixed in:
  • MongoDB 4.0.25+
  • MongoDB 4.2.18+
  • MongoDB 4.4.11+
  • MongoDB 5.0.14+
Referenced CVEs: CVE-2026-125116 · 4.8
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.
More from this source
Toyota M7P HID Descriptor Overflow (CVE-2024-4485/4478) DoS Analysis and POC 2026-11-10 Minecraft Auth Service Username Enumeration Vulnerability Analysis and Fix 2026-11-10 Amazon Braket Schemas Unsafe Reflection RCE Vulnerability Advisory 2026-11-10 WordPress WP-PostViews Pre-Auth SQL Injection Vulnerability with POC 2026-11-10 WordPress Contact Form 7 Unauth Deserialization RCE (CVE-2021-29487) with POC 2026-11-10
Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro