Threats tagged 'ghsa-hm9m-cvww-9ffq'

CVE-2026-88027 is a vulnerability in the MongoDB integration for Laravel where improper neutralization of special elements in data query logic occurs during embedded-document relation handling. This flaw allows an authenticated user who can influence an embedded record identifier to have that identifier interpreted as a query condition instead of a literal identifier. This can lead to unintended deletion of all embedded documents in a targeted record or overwriting an embedded document other than the intended target.