Comparison Overview
In-N-Out Burger

In-N-Out Burger
4199 Campus Drive, Irvine, 92612, US
Last Update: 01/04/2026
In-N-Out Burger was founded in 1948 by Harry and Esther Snyder in Baldwin Park, California, and remains privately owned and operated. Under the direction of the Snyder family, the company has opened restaurants throughout California, Nevada, Arizona, Utah, Texas, Orego...

Papa Johns
788 Circle 75 Pkwy SE, Atlanta, Georgia, US, 30339
Last Update: 01/04/2026
Papa Johns seeks people who have an entrepreneurial spirit and share our philosophy for success. Hands-on training, a clean and safe work environment, quality business practices, advancement opportunities and meaningful work combine to produce not only the best pizza, b...
Compliance Ranges Comparison

In-N-Out Burger







Papa Johns






Benchmark & Cyber Underwriting Signals
Incidents vs Restaurants Industry Avg (This Year)
No incidents recorded for In-N-Out Burger in 2026.
Incidents vs Restaurants Industry Avg (This Year)
No incidents recorded for Papa Johns in 2026.
Incident History - In-N-Out Burger (X = Date, Y = Severity)
In-N-Out Burger cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Papa Johns (X = Date, Y = Severity)
Papa Johns cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

In-N-Out Burger

Papa Johns
FAQ
Latest Global CVEs
An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command
The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.
An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS. Strict-winding polygons are intentionally unsupported for indexing, but the guard that rejects them does not inspect members of a GeometryCollection, allowing the unsafe path to be reached which ends with an ensuing null-pointer dereference.
The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.
An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.