Ruby/mongoid/4.0.0
Mongoid is an ODM (Object Document Mapper) Framework for MongoDB, written in Ruby.
https://rubygems.org/gems/mongoid
MIT
1 Security Vulnerabilities
Mongoid::Criteria.from_hash method allows arbitrary method calls
Published date: 2026-02-27
CVE: 2026-2302
CVSS V3: 6.5
Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.
Affected versions: ["6.4.5", "4.0.2", "4.0.0.rc2", "3.0.0", "2.7.0", "2.4.12", "2.0.0.beta.16", "2.0.0.beta.8", "5.1.0", "3.0.11", "2.2.2", "2.2.1", "2.0.1", "1.2.11", "6.2.1", "5.1.6", "1.0.2", "7.1.1", "6.4.0", "5.2.0.rc0", "3.0.19", "3.0.13", "2.5.0", "2.2.3", "2.0.0.beta.13", "2.0.0.beta.11", "1.9.5", "4.0.0", "2.4.6", "2.2.5", "2.1.8", "2.0.0.beta.20", "2.0.0.beta.5", "6.1.1", "3.1.2", "2.5.2", "1.1.4", "7.0.10", "6.2.0", "6.0.2", "7.1.0", "3.0.16", "2.3.4", "2.3.2", "2.2.6", "4.0.0.alpha2", "3.0.3", "2.5.1", "2.4.2", "2.3.3", "6.4.7", "5.4.0", "3.0.9", "2.0.0.rc.2", "6.0.3", "3.1.1", "1.2.8", "1.2.2", "5.2.1", "5.1.5", "5.1.2", "5.1.1", "4.0.0.beta2", "2.0.0.beta.18", "1.2.5", "1.1.0", "0.12.0", "7.0.8", "3.1.3", "3.0.10", "3.0.6", "3.0.4", "2.3.5", "6.4.1", "6.0.0", "5.0.2", "3.1.7", "3.0.20", "3.0.1", "2.4.10", "2.4.4", "2.4.0", "2.0.0.rc.3", "1.2.4", "3.0.2", "2.0.0.beta.14", "7.0.1", "6.0.1", "6.0.0.rc0", "7.1.4", "6.3.0", "2.2.0", "2.1.5", "2.1.4", "2.0.0.beta.17", "1.2.1", "5.0.0.rc0", "3.0.14", "2.4.7", "2.0.0.beta.7", "1.0.6", "1.0.0", "0.8.4", "0.7.5", "0.7.3", "0.4.7", "0.4.1", "0.8.9", "0.6.1", "0.8.10", "0.10.5", "0.11.3", "0.9.6", "0.5.9", "0.9.9", "0.2.5", "0.10.2", "0.8.8", "0.7.0", "0.5.0", "0.10.0", "0.9.11", "0.7.10", "0.10.3", "0.9.3", "0.7.9", "0.6.10", "0.6.8", "0.6.6", "0.4.2", "0.3.1", "0.3.4", "0.9.8", "7.0.0.beta", "7.0.6", "2.0.0", "1.2.13", "1.2.6", "1.0.1", "7.0.3", "7.0.0", "6.4.4", "7.1.2", "7.0.5", "7.0.7", "7.0.4", "7.0.2", "5.1.4", "3.0.5", "2.3.1", "2.0.2", "7.2.0.rc1", "6.1.0", "2.4.3", "2.0.0.rc.5", "2.0.0.rc.4", "1.9.0", "1.2.10", "1.2.0", "0.11.7", "5.1.3", "4.0.0.alpha1", "3.0.15", "2.4.5", "2.0.0.rc.1", "2.0.0.beta.10", "5.0.0", "2.4.1", "2.2.4", "2.1.7", "2.1.0", "2.0.0.rc.7", "1.9.1", "2.0.0.beta.12", "0.11.4", "6.4.2", "6.1.0.rc0", "4.0.1", "4.0.0.rc1", "3.0.18", "2.8.0", "2.1.3", "2.0.0.rc.8", "2.0.0.beta.15", "0.10.4", "3.0.17", "2.1.1", "1.9.2", "1.2.12", "0.11.9", "0.11.8", "5.0.1", "3.1.6", "3.1.4", "3.0.22", "3.0.21", "3.0.0.rc", "0.11.5", "0.11.0", "1.2.7", "1.0.3", "2.1.2", "1.1.3", "2.4.9", "1.2.3", "0.11.1", "2.4.8", "1.1.1", "0.11.6", "5.0.0.beta", "3.1.5", "2.6.0", "2.3.0", "2.0.0.alpha", "1.2.14", "0.10.6", "5.2.0", "2.1.6", "2.0.0.beta.19", "2.0.0.beta.9", "1.0.5", "7.1.0.rc0", "5.4.1", "3.1.0", "3.0.12", "2.7.1", "2.1.9", "2.0.0.rc.6", "1.2.9", "1.0.4", "0.11.2", "6.0.0.beta", "4.0.0.beta1", "3.0.23", "2.8.1", "2.4.11", "1.1.2", "0.9.0", "0.9.5", "0.9.12", "0.5.3", "0.9.4", "0.8.7", "0.8.5", "0.5.1", "0.9.10", "0.6.7", "0.5.4", "0.6.0", "0.9.1", "0.5.11", "0.4.4", "0.8.6", "0.8.2", "0.6.5", "0.5.10", "0.8.1", "0.6.3", "0.4.5", "0.3.0", "0.8.3", "0.6.9", "0.4.0", "0.10.1", "0.5.7", "0.5.5", "0.3.2", "0.2.6", "0.4.3", "0.7.8", "0.7.2", "0.7.1", "0.6.4", "0.2.7", "0.7.6", "0.7.4", "0.4.8", "0.3.3", "0.9.2", "0.5.6", "0.5.2", "0.9.7", "0.7.7", "0.6.2", "0.5.8", "7.1.5", "7.0.11", "6.4.8", "7.2.0", "7.1.6", "7.2.1", "7.0.12", "7.1.7", "7.2.2", "7.2.3", "7.0.13", "7.3.0", "7.1.8", "7.3.1", "7.2.4", "7.1.9", "7.1.10", "7.2.5", "7.3.2", "7.2.6", "7.1.11", "7.3.3", "7.3.4", "7.4.0", "7.3.5", "7.5.0", "7.4.1", "7.4.3", "7.5.1", "7.5.2", "7.5.3", "7.5.4", "9.0.0", "9.0.1", "9.0.2", "9.0.3", "9.0.4", "9.0.5", "9.0.6", "9.0.7", "9.0.8", "9.0.9"]
Secure versions: [7.6.0, 7.6.1, 7.6.2, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.1.0, 8.1.1, 8.1.10, 8.1.11, 8.1.12, 8.1.13, 8.1.2, 8.1.3, 8.1.4, 8.1.5, 8.1.6, 8.1.7, 8.1.8, 8.1.9, 9.0.10, 9.0.11, 9.0.12, 9.1.0, 9.1.1]
Recommendation: Update to version 9.1.1.
362 Other Versions
| Version | License | Security | Released | |
|---|---|---|---|---|
| 9.1.1 | MIT | 2026-09-17 - 22:16 | 3 days | |
| 9.1.0 | MIT | 2026-05-12 - 19:45 | 4 months | |
| 9.0.12 | MIT | 2026-09-17 - 22:20 | 3 days | |
| 9.0.11 | MIT | 2026-04-27 - 22:01 | 5 months | |
| 9.0.10 | MIT | 2026-01-26 - 23:07 | 8 months | |
| 9.0.9 | MIT | 1 | 2025-12-18 - 16:55 | 9 months |
| 9.0.8 | MIT | 1 | 2025-09-18 - 20:07 | about 1 year |
| 9.0.7 | MIT | 1 | 2025-07-24 - 16:36 | about 1 year |
| 9.0.6 | MIT | 1 | 2025-02-24 - 20:22 | over 1 year |
| 9.0.5 | MIT | 1 | 2025-01-30 - 19:42 | over 1 year |
| 9.0.4 | MIT | 1 | 2025-01-08 - 20:06 | over 1 year |
| 9.0.3 | MIT | 1 | 2024-11-12 - 17:08 | almost 2 years |
| 9.0.2 | MIT | 1 | 2024-09-20 - 12:09 | about 2 years |
| 9.0.1 | MIT | 1 | 2024-07-29 - 19:46 | about 2 years |
| 9.0.0 | MIT | 1 | 2024-05-01 - 15:22 | over 2 years |
| 8.1.13 | MIT | 2026-09-17 - 22:22 | 3 days | |
| 8.1.12 | MIT | 2026-01-26 - 23:02 | 8 months | |
| 8.1.11 | MIT | 2025-07-24 - 17:31 | about 1 year | |
| 8.1.10 | MIT | 2025-02-24 - 20:22 | over 1 year | |
| 8.1.9 | MIT | 2025-01-30 - 19:42 | over 1 year | |
| 8.1.8 | MIT | 2025-01-07 - 16:22 | over 1 year | |
| 8.1.7 | MIT | 2024-11-12 - 17:23 | almost 2 years | |
| 8.1.6 | MIT | 2024-09-20 - 16:56 | about 2 years | |
| 8.1.5 | MIT | 2024-02-28 - 19:26 | over 2 years | |
| 8.1.4 | MIT | 2023-11-22 - 10:46 | almost 3 years | |
| 8.1.3 | MIT | 2023-10-23 - 15:38 | almost 3 years | |
| 8.1.2 | MIT | 2023-08-24 - 21:47 | about 3 years | |
| 8.1.1 | MIT | 2023-07-11 - 17:38 | about 3 years | |
| 8.1.0 | MIT | 2023-06-30 - 09:34 | about 3 years | |
| 8.0.13 | MIT | 2026-09-17 - 22:22 | 3 days | |
| 8.0.12 | MIT | 2026-01-26 - 22:56 | 8 months | |
| 8.0.11 | MIT | 2025-07-24 - 17:34 | about 1 year | |
| 8.0.10 | MIT | 2025-02-24 - 20:22 | over 1 year | |
| 8.0.9 | MIT | 2025-01-29 - 17:57 | over 1 year | |
| 8.0.8 | MIT | 2024-02-28 - 19:27 | over 2 years | |
| 8.0.7 | MIT | 2023-10-23 - 15:45 | almost 3 years | |
| 8.0.6 | MIT | 2023-08-24 - 21:46 | about 3 years | |
| 8.0.5 | MIT | 2023-07-11 - 15:42 | about 3 years | |
| 8.0.4 | MIT | 2023-06-28 - 13:52 | about 3 years | |
| 8.0.3 | MIT | 2022-12-14 - 11:49 | almost 4 years | |
| 8.0.2 | MIT | 2022-07-23 - 14:59 | about 4 years | |
| 8.0.1 | MIT | 2022-07-20 - 05:37 | about 4 years | |
| 7.6.2 | MIT | 2026-09-17 - 22:23 | 3 days | |
| 7.6.1 | MIT | 2026-01-26 - 22:52 | 8 months | |
| 7.6.0 | MIT | 2025-12-10 - 15:19 | 9 months | |
| 7.5.4 | MIT | 1 | 2023-08-24 - 21:46 | about 3 years |
| 7.5.3 | MIT | 1 | 2023-06-28 - 16:35 | about 3 years |
| 7.5.2 | MIT | 1 | 2022-11-09 - 16:25 | almost 4 years |
| 7.5.1 | MIT | 1 | 2022-07-23 - 14:58 | about 4 years |
| 7.5.0 | MIT | 1 | 2022-07-20 - 04:47 | about 4 years |