MongoDB Entity Framework Core Provider
3 CVEs affecting MongoDB Entity Framework Core Provider. Latest disclosed: 2026-09-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-92758 | Medium | 5.5 | 2026-09-17 | If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information (if in use) such as passwo… |
CVE-2026-92757 | Medium | 5.5 | 2026-09-17 | Applications built on MongoDB Entity Framework Core Provider which place a database name in the connection string may inadvertently disable field level encrypt… |
CVE-2026-92756 | Medium | 5.5 | 2026-09-17 | Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently… |