Veille CVE

Recherche « Mongodb entity framework core provider »

3 CVE

  1. CVE-2026-92758 5.5 Moyenne

    MongoDB Inc. MongoDB Entity Framework Core Provider · Mongodb entity framework core provider

    If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information (if in use) such as passwords and AWS secure access keys.

  2. CVE-2026-92757 5.5 Moyenne

    MongoDB Inc. MongoDB Entity Framework Core Provider · Mongodb entity framework core provider

    Applications built on MongoDB Entity Framework Core Provider which place a database name in the connection string may inadvertently disable field level encryption.

  3. CVE-2026-92756 5.5 Moyenne

    MongoDB Inc. MongoDB Entity Framework Core Provider · Mongodb entity framework core provider

    Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database.