Threats tagged 'ghsa-4ww7-gqv6-mffc'

CVE-2026-88030 is a vulnerability in the GridFS component of the MongoDB Ruby Driver where improper neutralization of special elements in data query logic allows a caller-supplied structured file identifier to be interpreted as a query condition instead of a literal identifier. This can enable an authenticated user who can influence the identifier to access stored file content beyond the intended target or delete all GridFS file chunks in the affected bucket, making stored content unreadable.