title: Improper Neutralization of Special Elements in Data Query Logic for Mongoose Create in Veracode
body: <p>I am using mongoose create function to add to my collection. I am taking data from request body and passing it to create function like this -</p>
  <pre><code>const someVariable = req.body;
  
  await userModelName.create(someVariable);
  </code></pre>
  <p>On <code>veracode</code>, it showing Improper Neutralization of Special Elements in Data Query Logic for this statement - <code>await userModelName.create(someVariable);</code></p>
  <p>Is there any way to modify this code to remove this alert from veracode ?</p>