Vulnerability field guide
NoSQL Injection
Switching from SQL to a document database does not remove injection — it changes the syntax. Learn how attacker-controlled types and operators rewrite filters, and how explicit schemas keep query structure on the server.
3 articles14 min totalOverview to advanced techniques
Start here
{"$ne": null}Step 01 · Start with the overview
NoSQL Injection6 min read
NoSQL Injection: When JSON Operators Rewrite a Query
Switching from SQL to a document database does not remove injection — it changes the syntax. Learn how attacker-controlled types and operators rewrite filters, and how explicit schemas keep query structure on the server.
Read the overviewContinue the field guide
2 focused deep-dives