Threats tagged 'ghsa-jw2c-7599-4ghc'

A vulnerability in the Mongoid ODM's automatic client-side encryption schema generation can cause values intended for encryption to be stored in cleartext when multiple models share the same storage location. This occurs without any error or warning, potentially exposing sensitive data to users with read-only database access but no encryption keys.