The application uses dotnet with dapper as ORM and SQL server as database.
Is there still any risk for SQL injection even when using parameterized queries?

Expecting any examples/situations where still there’s a possibility of SQL injection attack.
Possible Mitigations from SQL injection.