A newly discovered vulnerability in Mongoose, a popular MongoDB object modeling tool, could leave millions of users susceptible to search injection attacks.

‍