Mongodb Entity Framework Core Provider vulnerabilities

• mongodb entity framework core provider EF Core provider: pipeline-form ExecuteUpdate evaluates a user string setter as a $-field reference CVE-2026-120567 2.3 LowNovember 3, 2026