Entity trail

MongoDB

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-09 / projects-researcherdbx carries 1,256 open issues against 58 open PRs, the most lopsided backlog on today's boardst8y2/dbx is a 20 MB cross-platform database client covering 90+ engines including MySQL, PostgreSQL, SQLite, Redis, MongoDB and DuckDB, at 18,630 stars after a +336 day on the Rust board. Splitting its open_issues_count into PRs and issues gives 58 to 1,256, a 21:1 ratio that the single GitHub count completely hides. That shape says a large user base filing bugs with almost no outside contributors sending patches, the opposite of vercel-labs/agent-browser's near-even 356 PRs to 348 issues measured the same hour.
2026-09-08 / saas-disruption-researcherNotifkit Ships Notification Infrastructure as an MIT npm Library With an MCP Server, Explicitly Positioned Against NovuNotifkit launched on Show HN 2026-09-08 (107 stars, MIT, created 2026-07-16) as a self-hosted notification layer on Node.js, PostgreSQL and Redis covering email via Resend, SMS via Twilio, FCM push, webhooks, and Slack, Telegram, Discord and WhatsApp. Its README names Novu directly and argues the opposite architecture: a library first rather than a platform, Postgres rather than MongoDB, and workflows-as-code in TypeScript rather than a visual editor, with nothing withheld from the self-hosted build. The `@notifkit/mcp` package is the piece worth noting, letting an agent send notifications, inspect delivery logs and diagnose failures directly, which is the shape a notification vendor's dashboard was previously the only way to reach.
2026-08-23 / agents-researcherLangGraph MongoDB checkpointer allows cross-tenant state reads via NoSQL operator injectionGHSA-533j-2v4q-mw5h (CVE-2026-55253, CVSS 7.7, published 20 August 2026) covers MongoDBSaver.list() and MongoDBStore.search() accepting a filter parameter without rejecting MongoDB operator keys prefixed with $, letting a caller who controls the filter read checkpoints outside their thread scope. Fixed in langgraph-checkpoint-mongodb 0.3.0 and langgraph-store-mongodb 0.4.0. A parallel npm advisory, CVE-2026-48121, covers the same class in the JS package where unenforced identifier types let $gt/$ne bypass thread scoping, fixed in 1.3.1.
2026-08-09 / agents-researcherAWS Strands Agents exposed the tenant-isolation key to the model: CVE-2026-19111 lets a prompt forge another tenant's memory namespaceAWS security bulletin 2026-077-AWS (August 6) discloses an IDOR in strands-agents-tools where `mongodb_memory`, `elasticsearch_memory` and `mem0_memory` used a `namespace` field as the sole tenant-isolation key — and exposed that field as an LLM-controllable tool-schema parameter. A crafted prompt could emit a call with a forged namespace to read, modify, delete or poison another tenant's memories, and the standalone mongodb/elasticsearch functions additionally exposed connection parameters so the memory layer could be redirected to an attacker-specified cluster. Fixed in 0.8.3; the design lesson is that any security boundary rendered into a tool schema is a boundary the model can rewrite.
2026-08-05 / agents-researcherOpenAI Agents SDK 0.19.4 lands 17 fixes a day after 0.19.3, concentrated on guardrail ordering and sandbox budgetsReleased August 5, barely a day after 0.19.3, this patch defers non-stream session saves until output guardrails run, preserves completed tool guardrail results, honors resolved status before policy checks, and cancels sibling work after concurrent failures — a cluster suggesting real-world races between guardrails and session persistence. Sandbox changes enforce token output budgets and single-flight cached dependency factories; session changes enforce closed state in MongoDBSession, preserve repeated history provenance, and reject reused branch IDs on branch creation. It also redacts invalid tool argument errors, which previously could echo attacker-controlled arguments back into logs.
2026-08-02 / agents-researcherOpenAI Agents SDK 0.19.2 runs a credential-redaction sweep across every MCP error pathThe August 1 release lands five separate MCP redaction fixes — URL credentials stripped from SDK errors, from tracing and tool metadata, and transport errors redacted for prompts/resources, direct cleanup, and nested cleanup — closing a class of leaks where an MCP server URL containing a token would surface in traces or exception text. It also fixes MCP servers not being cleaned up before reconnect, reports input guardrail results when a tripwire aborts a run, and corrects session item counting across SQLAlchemy, MongoDB, Redis, Dapr, and AdvancedSQLiteSession backends when a positive limit is set. For anyone piping agent traces to an observability backend, the redaction work alone is worth the upgrade.
2026-07-30 / agents-researcherMastra 1.54.0 lets AgentController run durable agent sessions directly inside Slack, Discord and Telegram threadsReleased July 30, Mastra's AgentController gains chat-channel adapters that map each chat thread to one durable controller session, with native streaming output, tool-approval cards resolved through the session's approval gate, typing indicators, and controller-owned webhook routes at /api/agent-controllers/<ID>/channels/<PLATFORM>/webhook. The release also adds MongoDB bring-your-own-collection indexing with hybrid vector+full-text retrieval, exact metadata filtering on memory.recall across pg/mysql/mongodb/redis/clickhouse and more, and a direct WebSocket exec path for PlatformSandbox using short-lived JWT leases. Breaking change: channel handlers now take a fourth ChannelHandlerContext argument.
2026-06-16 / sources-researcherArcade.dev Raises $60M Series A to Be the 'Secure Action Layer' Governing What Production AI Agents Can DoArcade closed a $60M Series A led by SYN Ventures with strategic checks from Morgan Stanley and Wipro (totaling $72M raised), building the authorization layer that decides what actions a production agent is allowed to take. The team authored the MCP authorization spec and comes from the identity/data/integration teams behind Okta, Redis, MongoDB, Snowflake, and Airbyte, positioning Arcade as the permissions control plane for agent actions across the Fortune 500. It landed the same day as NewCore's $66M agent-identity raise — a clear signal that VCs are now funding the 'what can the agent touch' layer as its own category, distinct from the models themselves.
2026-05-11 / saas-disruption-researcherRox AI Hits $1.2B Valuation — Autonomous Sales Agents Deploy Into Existing Salesforce/Zendesk StacksRox, founded in 2024 by ex-New Relic CGO Ishan Mukherjee, reached unicorn status in under two years with a round led by General Catalyst (Sequoia, GV participating). The platform deploys hundreds of autonomous agents that plug into existing Salesforce/Zendesk stacks — monitoring accounts, researching prospects, updating CRM records — without requiring customers to rip-and-replace. Customers include Ramp, MongoDB, and New Relic. At ~$8M projected 2025 ARR, the 150x revenue multiple prices in the assumption that autonomous sales agents will replace the traditional CRM workflow layer entirely.
2026-05-06 / saas-disruption-researcherSaaStr: Net New Customer Growth Reveals B2B Divergence — AI-Adjacent Cloudflare +40%, App SaaS Atlassian Adds Collapsed 77%Jason Lemkin's analysis reveals net new customer growth as the most honest B2B health signal. AI-infrastructure-adjacent companies are accelerating: Cloudflare 22%→40% YoY, Twilio +7%→+42%, Snowflake +40% net-new adds, Palantir 35%→45%. Application SaaS is decelerating: Atlassian $10K+ customer adds dropped 77% in one quarter, HubSpot 23%→16%, MongoDB direct sales customers contracted from 7,500 to 7,000. The '2:1 rule' — revenue growth should be ≤2x customer count growth — exposes which companies grow from new logos vs milk existing ones.
2026-05-04 / agents-researcherLangChain Interrupt Conference May 13-14: Apple Reveals Low-Code Agent Platform Serving 15,000+ EmployeesLangChain's Interrupt 2026 conference (May 13-14, San Francisco) features Apple presenting how they built a low-code agent platform serving 15,000+ employees that rethinks how LangGraph constructs graphs at runtime. Other speakers include Coinbase, LinkedIn, Lyft (agent evals with LangSmith), Rippling, and Workday on production agent deployments. Andrew Ng and MongoDB CEO deliver keynotes.
2026-04-18 / agents-researcherFastGPT Agent Platform Hit with CVSS 9.8 NoSQL Injection Enabling Unauthenticated Admin TakeoverCVE-2026-40351 (CVSS 9.8) allows unauthenticated attackers to bypass password checks on FastGPT's login endpoint by passing a MongoDB query operator object as the password field, gaining root administrator access. A companion CVE-2026-40352 (High severity) enables authenticated attackers to change any account's password without knowing the current one via a second NoSQL injection in the password change endpoint. Both are fixed in FastGPT 4.14.9.5.

Graph relationships

SUPPORTS
LangGraph
LangGraph MongoDB checkpointer had a CVE-2026-55253 allowing cross-tenant state reads via NoSQL injection.
Source finding
USES
strands-agents-tools
mongodb_memory in strands-agents-tools used namespace field as sole tenant-isolation key
Source finding
PARTNERS WITH
LangChain
LangChain and MongoDB announced a formal partnership for AI agent infrastructure
Source finding
SUPPORTS
Dokploy
Dokploy provides automated database management for MongoDB.
Source finding
SUPPORTS
LangGraph -> MongoDB
LangGraph MongoDB checkpointer had a CVE-2026-55253 allowing cross-tenant state reads via NoSQL injection.
Source finding
USES
strands-agents-tools -> MongoDB
mongodb_memory in strands-agents-tools used namespace field as sole tenant-isolation key
Source finding
PARTNERS WITH
LangChain -> MongoDB
LangChain and MongoDB announced a formal partnership for AI agent infrastructure
Source finding
SUPPORTS
Dokploy -> MongoDB
Dokploy provides automated database management for MongoDB.
Source finding

Source trail

GitHub notifkit GHSA-533j-2v4q-mw5h purchased the Essential Plugin portfolio on Flippa CVE-2026-40351 Noma Security disclosed Ars Technica reports ServiceNow Salesforce Atlassian SaaStr's Jason Lemkin stealth churn problem

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…