Entity Framework Core Provider

entity_framework_core_provider

Vendor: Mongodb • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-92758 1Mongodb 1Entity Framework Core Provider Sep 24, 2026 Sep 17, 2026 5.7 MEDIUM· v4 5.5 MEDIUM· v3 N/A· v2 If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information (if in use) such as passwords and AWS secure access keys.
CVE-2026-92757 1Mongodb 1Entity Framework Core Provider Sep 24, 2026 Sep 17, 2026 6.8 MEDIUM· v4 5.5 MEDIUM· v3 N/A· v2 Applications built on MongoDB Entity Framework Core Provider which place a database name in the connection string may inadvertently disable field level encryption.
CVE-2026-92756 1Mongodb 1Entity Framework Core Provider Sep 24, 2026 Sep 17, 2026 6.8 MEDIUM· v4 5.5 MEDIUM· v3 N/A· v2 Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields...Show more Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database.Show less