Name of the Vulnerable Software and Affected Versions loopback-connector-mongodb versions prior to 3.6.0

Description The issue arises from the lack of proper sanitization of filters passed to the database query, leading to NoSQL Injection. This allows for the execution of code on the database driver and can result in data leaks.

Recommendations Upgrade to version 3.6.0 or later.