| Package | Affected versions | Patched versions |
|---|---|---|
| entity framework core provider | ≥ 10.0.0, < 10.0.4≥ 8.0.0, < 8.4.4≥ 9.0.0, < 9.1.4 | 10.0.48.4.49.1.4 |
Applications built on MongoDB Entity Framework Core Provider which place a database name in the connection string may inadvertently disable field level encryption.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free