Description
An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid library may allow an unauthenticated party to cause excessive processing within an embedding application process. Applications that place user-supplied text into a pattern-matching query condition on an embedded association may become unresponsive.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
MongoDB Inc. Mongoid
Default version status: unaffected
7.2.0 to ≤ 7.2.6affected7.3.0 to ≤ 7.3.5affected7.4.0 to ≤ 7.4.3affected7.5.0 to ≤ 7.5.4affected7.6.0 to ≤ 7.6.1affected8.0.0 to ≤ 8.0.12affected8.1.0 to ≤ 8.1.12affected9.0.0 to ≤ 9.0.11affected9.1.0affected