Tue, Nov 10 brief Vulnerabilities and patches
MongoDB library Mongoose leaves document counts open to query injection
It affects apps that turn on sanitizeFilter and pass user input to countDocuments(), and Mongoose fixed it in 9.9.2, 8.24.3 and releases for the 6 and 7 lines.