Recently most of the package versions of https://www.nuget.org/packages/Oracle.ManagedDataAccess/ and https://www.nuget.org/packages/Oracle.ManagedDataAccess.Core/ were marked as having a vulnerability. This is based on https://github.com/advisories/GHSA-5pm2-9mr2-3frq
Is it really correct that only the 21.x branches have been fixed? There have been new releases in the 19.x branches too, but those are still marked as having the vulnerability.
https://www.oracle.com/security-alerts/cpujan2023.html says that CVE-2023-21893 also affects supported version 19c. So I'd assume a still supported version would be fixed too?