MongoDB has no SQL. Hence it is safe from SQL injection-related threats. However, it provides complete safety and is highly secured would be an overstatement. A DOS can be triggered by the use of a specific find query.
By visiting this link, you can find the list of issues reported. Even if it is safe from SQL injection, it is not safe from JavaScript-related injections that can be a serious issue.