Two critical vulns lead to stolen MongoDB data, RCE

Security sleuths found two critical vulnerabilities in a third-party library that MongoDB relies on, which means bad guys can potentially steal data and run code. Mongoose also has two critical security flaws.