CVE-2026-93761 — Denial of service via unbounded regex matching in Mongoid's in-memory query matcher
An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid library may allow an unauthenticated party to cause excessive proce…
Published: 2026-09-18 · CVSS: 8.7 · CVSS 4.0
An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid library may allow an unauthenticated party to cause excessive processing within an embedding application process. Applications that place user-supplied text into a pattern-matching query condition on an embedded association may become unresponsive.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7