CVE-2026-120567

The MongoDB Entity Framework Core provider contains a vulnerability where it fails to neutralize special elements in caller-supplied values during bulk updates expressed as database results. Because the provider does not properly sanitize these values, input supplied as plain data can be misinter...