Browse Security Advisories
High Security Advisories for Umbraco.Cms in nuget Clear Filters
High
5 months ago
Umbraco has a Management API Vulnerability to Path Traversal With Authenticated Users
nuget
Umbraco.Cms
Filter by Severity
Filter by Ecosystem
maven
2,244
pypi
1,804
npm
1,647
packagist
1,454
go
1,020
nuget
1,015
cargo
391
rubygems
305
swift
18
actions
18
hex
10
pub
5
Filter by Package
Microsoft.ChakraCore
234
Microsoft.AspNetCore.App.Runtime.win-x64
17
Microsoft.AspNetCore.App.Runtime.win-x86
17
Microsoft.AspNetCore.App.Runtime.win-arm
16
Microsoft.AspNetCore.App.Runtime.win-arm64
15
Microsoft.AspNetCore.App.Runtime.linux-arm64
14
Microsoft.NetCore.App.Runtime.win-arm64
14
Microsoft.NetCore.App.Runtime.win-x64
14
Microsoft.AspNetCore.App.Runtime.osx-x64
14
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
14
Microsoft.NetCore.App.Runtime.win-x86
14
Microsoft.AspNetCore.App.Runtime.linux-x64
14
Microsoft.NetCore.App.Runtime.win-arm
14
Microsoft.AspNetCore.App.Runtime.linux-arm
14
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
14
Microsoft.AspNetCore.App.Runtime.linux-musl-arm
10
Microsoft.NetCore.App.Runtime.linux-musl-x64
9
Microsoft.NetCore.App.Runtime.osx-arm64
9
Microsoft.NetCore.App.Runtime.linux-musl-arm64
9
Microsoft.NetCore.App.Runtime.osx-x64
9
Microsoft.NetCore.App.Runtime.linux-x64
9
Microsoft.NetCore.App.Runtime.linux-arm64
9
Microsoft.NetCore.App.Runtime.linux-arm
9
Microsoft.NetCore.App.Runtime.linux-musl-arm
9
Microsoft.NETCore.App.Runtime.win-x86
8
Microsoft.NETCore.App.Runtime.win-x64
8
Microsoft.NETCore.App.Runtime.win-arm64
8
Microsoft.AspNetCore.App.Runtime.osx-arm64
8
OPCFoundation.NetStandard.Opc.Ua.Core
7
DotNetNuke.Core
7
Magick.NET-Q16-HDRI-x86
6
Microsoft.NETCore.App
6
Microsoft.AspNetCore.All
6
Magick.NET-Q8-AnyCPU
6
Magick.NET-Q16-x86
6
Magick.NET-Q8-x86
6
Magick.NET-Q16-HDRI-AnyCPU
6
Magick.NET-Q16-AnyCPU
6
Magick.NET-Q16-HDRI-x64
5
Microsoft.AspNetCore.App
5
Magick.NET-Q16-OpenMP-x64
5
Magick.NET-Q8-OpenMP-arm64
5
Magick.NET-Q16-HDRI-OpenMP-x64
5
Magick.NET-Q16-HDRI-arm64
5
Magick.NET-Q16-x64
5
Magick.NET-Q8-OpenMP-x64
5
CefSharp.Wpf.HwndHost
5
Magick.NET-Q8-arm64
5
Magick.NET-Q16-HDRI-OpenMP-arm64
5
Microsoft.WindowsDesktop.App.Runtime.win-x86
5
Microsoft.WindowsDesktop.App.Runtime.win-x64
5
Magick.NET-Q8-x64
5
CefSharp.Common
5
Magick.NET-Q16-arm64
5
CefSharp.WinForms
5
Magick.NET-Q16-OpenMP-arm64
5
CefSharp.Wpf
5
Microsoft.NETCore.App.Runtime.linux-x64
4
Microsoft.NETCore.App.Runtime.linux-musl-arm64
4
Microsoft.AspNetCore.Mvc.Core
4
Microsoft.NETCore.App.Runtime.osx-x64
4
Microsoft.NETCore.App.Runtime.linux-arm64
4
Microsoft.NETCore.App.Runtime.win-arm
4
Microsoft.NETCore.App.Runtime.linux-arm
4
Microsoft.NETCore.App.Runtime.linux-musl-x64
4
Microsoft.WindowsDesktop.App.Runtime.win-arm64
4
Microsoft.AspNetCore.Identity
3
Microsoft.AspNetCore.Server.Kestrel.Core
3
SixLabors.ImageSharp
3
Microsoft.Native.Quic.MsQuic.Schannel
3
Microsoft.AspNetCore.Mvc.Cors
3
Microsoft.Native.Quic.MsQuic.OpenSSL
3
System.Net.Http
3
wix
3
Microsoft.NETCore.App.Runtime.rhel.6-x64
3
Umbraco.Cms.Core
2
Microsoft.AspNetCore.Mvc.Localization
2
PeterO.Cbor
2
DNN.PLATFORM
2
Microsoft.AspNetCore.Mvc.Razor.Host
2
NuGet.Commands
2
Microsoft.AspNetCore.Mvc
2
PanelSwWix4.Sdk
2
System.IO.Packaging
2
Moment.js
2
Microsoft.AspNetCore.Mvc.WebApiCompatShim
2
System.Net.WebSockets.Client
2
Sustainsys.Saml2
2
Microsoft.AspNetCore.Mvc.DataAnnotations
2
Microsoft.AspNetCore.Mvc.Formatters.Xml
2
OPCFoundation.NetStandard.Opc.Ua
2
Umbraco.CMS
2
moment
2
NuGet.CommandLine
2
System.Text.Json
2
Microsoft.AspNetCore.Mvc.Razor
2
CefSharp.Common.NETCore
2
Microsoft.AspNetCore.Mvc.ViewFeatures
2
Microsoft.AspNetCore.Mvc.TagHelpers
2
Microsoft.AspNetCore.Mvc.Abstractions
2
Yarp.ReverseProxy
2
NuGet.Protocol
2
System.Security.Cryptography.Xml
2
Microsoft.AspNetCore.Mvc.Formatters.Json
2
System.Net.Http.WinHttpHandler
2
Microsoft.NETCore.App.Runtime.linux-musl-arm
2
System.Private.Uri
2
CefSharp.OffScreen
2
Microsoft.AspNetCore.Mvc.ApiExplorer
2
Microsoft.Owin
2
System.Text.Encodings.Web
2
System.Net.Security
2
PanelSW.Custom.WiX
2
UmbracoForms
1
Newtonsoft.Json
1
DotVVM
1
YamlDotNet
1
libwebp-sys2
1
Microsoft.AspNetCore.Http.Connections
1
Snappier
1
Microsoft.Data.OData
1
CefSharp.WinForms.NETCore
1
System.ServiceModel.Duplex
1
Microsoft.Azure.Storage.DataMovement
1
magick.net-q16-hdri-anycpu
1
Azure.Identity
1
Tgstation.Server.Host
1
System.ServiceModel.Http
1
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64
1
Imageflow.NativeTool.ubuntu-x86_64
1
Microsoft.AspNetCore.DataProtection.AzureStorage
1
NuGet.PackageManagement
1
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64
1
Apache.Avro
1
Microsoft.AspNetCore.Server.WebListener
1
Microsoft.AspNetCore.HttpOverrides
1
Hangfire.Core
1
System.Security.Cryptography.X509Certificates
1
UmbracoCMS.Core
1
set-value-nuget
1
RestSharp
1
MetadataExtractor
1
CefSharp.Wpf.NETCore
1
System.Net.Requests
1
elFinder.Net.Core
1
System.Private.ServiceModel
1
libwebp-sys
1
Amazon.IonDotnet
1
Oqtane.Framework
1
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64
1
dotnet-dump
1
Lucene.Net.Replicator
1
CefSharp.WinForms.NetCore
1
libpng
1
magick.net-q16-anycpu
1
magick.net-q16-x64
1
Imageflow.NativeTool.osx_10_11-x86_64
1
PowerShell
1
Microsoft.Extensions.Caching.Memory
1
magick.net-q8-openmp-x64
1
System.ServiceModel.Primitives
1
Imageflow.NativeRuntime.ubuntu_16_04-x86_64
1
Auth0-ASPNET-Owin
1
i18n
1
Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv
1
Microsoft.Owin.Security.Cookies
1
Microsoft.Windows.Compatibility
1
CefSharp.OffScreen.NETCore
1
elFinder.NetCore
1
github.com/chai2010/webp
1
Serenity.Net.Web
1
Microsoft.NETCore.Jit
1
git-credential-manager
1
Microsoft.NETCore.UniversalWindowsPlatform
1
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64
1
TGServiceInterface
1
System.Linq.Dynamic.Core
1
Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets
1
Imageflow.NativeRuntime.osx-x86_64
1
NHibernate
1
OpenTelemetry.AutoInstrumentation
1
Imageflow.NativeTool.osx-x86_64
1
Snowflake.Data
1
SkiaSharp
1
Tgstation.Server.Api
1
NuGet.Common
1
System.Security.Cryptography.Cose
1
System.Formats.Asn1
1
google/protobuf
1
Imageflow.Server
1
ImageResizer.Plugins.Imageflow
1
Microsoft.NET.Build.Containers
1
SharpZipLib
1
WixToolset.Util.wixext
1
Microsoft.AspNetCore.WebSockets
1
com.starkbank:ecdsa-java
1
Umbraco.Cms
1
SSCMS
1
Imageflow.NativeRuntime.ubuntu_18_04-x86_64-haswell
1
Microsoft.AspNetCore.Server.HttpSys
1