From 35f6577161e7a57540d0a41969c5bd439e5d7022 Mon Sep 17 00:00:00 2001
From: coralsundy <91170721+coralsundy@users.noreply.github.com>
Date: Tue, 30 Dec 2025 00:41:22 -0500
Subject: [PATCH] Update MongoDB Christmas 2025 CVE drama

---
 README.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/README.md b/README.md
index 5f8f903..4f5ffca 100644
--- a/README.md
+++ b/README.md
@@ -636,6 +636,11 @@ minio/minio - MinIO (apparently) becomes source-only (disabled docker release ri
 
 [moment/moment/issues/1407](https://github.com/moment/moment/issues/1407)
 
+MongoBleed - A MongoDB High CVE (8.7) disclosed on 12/19/2025:
+* The tech lead of Elastic Security published a POC of the CVE right on Christmas day of 2025: https://github.com/joe-desimone/mongobleed/issues/4
+* People found out the PR that cause this CVE back in 2017: https://github.com/mongodb/mongo/pull/1152#issuecomment-3695333733
+* HackerNews: https://news.ycombinator.com/item?id=46414475
+
 moq/moq - Privacy issues with SponsorLink
 * [issues/1370](https://github.com/moq/moq/issues/1370)
 * [issues/1372](https://github.com/moq/moq/issues/1372)