Critical flaws in Mongoose library expose MongoDB to data thieves, code execution

Security sleuths found two critical vulnerabilities in a third-party library that MongoDB relies on, which means bad guys can ...