Approved changes feed: RSS · Atom

cpe:2.3:a:mongodb_inc:mongodb_ruby_driver:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMongodb Inc (9ab524e9-2bd0-5ee5-96be-506a074e6407)
ProductMongodb Ruby Driver (016f6ac6-451d-5fb3-8cd3-4f98b531a39c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2302 vulnerable 2026-06-08 07:55:16.852716 Unsafe Reflection in Mongoid::Criteria.from_hash
MEDIUM (6.5)
Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.
Published: 2026-02-10T18:59:23.760Z
Updated: 2026-02-27T13:29:42.348Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.