CVE-2026-93761

Name of the Vulnerable Software and Affected Versions Mongoid (affected versions not specified)

Description An inefficient regular expression complexity issue exists in the in-memory query evaluation component. This allows an unauthenticated party to cause excessive processing within an embedding application process, potentially making applications unresponsive when user-supplied text is placed into a pattern-matching query condition on an embedded association. This is a Regular Expression Denial of Service (ReDoS), which occurs when a complex regular expression takes an exponential amount of time to process certain input strings.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.