nuget
Security Advisories in nuget
Low
11 days ago
Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding
nuget
Steeltoe.Configuration.Encryption
Moderate
11 days ago
Steeltoe: TLS private keys written to /tmp with default permissions, never deleted
nuget
Steeltoe.Configuration.Abstractions
Moderate
11 days ago
Steeltoe's static JWKS cache shared across schemes and never invalidated
nuget
Steeltoe.Security.Authentication.CloudFoundryBase, Steeltoe.Security.Authentication.OpenIdConnect, Steeltoe.Security.Authentication.JwtBearer
Moderate
11 days ago
Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission
nuget
Steeltoe.Management.EndpointBase, Steeltoe.Management.Endpoint
High
11 days ago
Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords
nuget
Steeltoe.Management.EndpointCore, Steeltoe.Management.Endpoint
High
11 days ago
Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch
nuget
Steeltoe.Discovery.Eureka
High
11 days ago
Steeltoe vulnerable to management-port isolation bypass via spoofed Host header
nuget
Steeltoe.Management.EndpointCore, Steeltoe.Management.Endpoint
Moderate
13 days ago
CefSharp.Common: `FolderSchemeHandlerFactory` path boundary check can expose files outside the configured root folder
nuget
CefSharp.Common
High
13 days ago
Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing
nuget
Microsoft.OpenAPI
Moderate
17 days ago
ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
17 days ago
ImageMagick: Memory Leak in wand option parser when providing invalid arguments
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
17 days ago
ImageMagick has Null Pointer Dereference caused by the distort operation when passing incorrect arguments
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
17 days ago
ImageMagick has a Use-After-Free when allocation in CheckPrimitiveExtent fails
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
18 days ago
ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
18 days ago
ImageMagick: Policy Bypass can Trigger an Out-of-Memory condition
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
18 days ago
ImageMagick: Policy Bypass can read disallowed files via symlink
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
18 days ago
ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
18 days ago
ImageMagick has a Heap Buffer Over-Write in MAT decoder on 32-bit systems
nuget
Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
18 days ago
ImageMagick Vulnerable to Stack Overflow in its MVG Decoder
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
18 days ago
ImageMagick has an Infinite Loop in subimage-search with crafted image
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
18 days ago
ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
18 days ago
MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic arguments
nuget
MessagePack
Moderate
18 days ago
MessagePack-CSharp: InterfaceLookupFormatter bypasses collision-resistant comparer settings
nuget
MessagePack
Moderate
18 days ago
MessagePack-CSharp: Multi-dimensional array formatters allocate from unchecked dimensions
nuget
MessagePack
Moderate
18 days ago
MessagePack-CSharp: Unity unsafe blit formatter allocates from unbounded byte length
nuget
MessagePack
Moderate
18 days ago
MessagePack-CSharp: DynamicUnionResolver-generated deserializers miss depth enforcement
nuget
MessagePack
Moderate
18 days ago
MessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcement
nuget
MessagePack
Moderate
18 days ago
MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted maps
nuget
MessagePack
Moderate
18 days ago
MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengths
nuget
MessagePack
Moderate
18 days ago
MessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodies
nuget
MessagePack
High
18 days ago
MessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depth
nuget
MessagePack
High
18 days ago
MessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows
nuget
MessagePack
High
24 days ago
CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality
nuget
CoreWCF.Primitives
High
24 days ago
CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages
nuget
CoreWCF.Primitives
Critical
24 days ago
CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation
nuget
CoreWCF.Primitives
High
24 days ago
CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced
nuget
CoreWCF.Primitives
Low
24 days ago
CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass
nuget
CoreWCF.Primitives
Moderate
24 days ago
CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution
nuget
CoreWCF.UnixDomainSocket
Moderate
24 days ago
CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance
nuget
CoreWCF.NetNamedPipe
Moderate
24 days ago
CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade
nuget
CoreWCF.UnixDomainSocket
Moderate
24 days ago
CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.
nuget
CoreWCF.Kafka
High
24 days ago
CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate
nuget
CoreWCF.Primitives
Moderate
24 days ago
CoreWCF: WS-Security signature substitution via document-wide Signature lookup
nuget
CoreWCF.Primitives
High
24 days ago
CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake
nuget
CoreWCF.NetFramingBase
Moderate
25 days ago
NCalc: Denial of Service via Unbounded and Non-Terminating Factorial Evaluation
nuget
NCalcSync, NCalc.Core
Moderate
27 days ago
Microsoft Security Advisory CVE-2026-45491 – .NET Tampering Vulnerability
nuget
Microsoft.NETCore.App.Runtime.linux-x64
High
28 days ago
Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vulnerability
nuget
Microsoft.AspNetCore.SignalR.Protocols.MessagePack, Microsoft.AspNetCore.App.Runtime.osx-arm64, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.linux-x64
High
about 1 month ago
MessagePack's LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input
nuget
MessagePack
High
about 1 month ago
TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection
packagist, nuget, npm
tinymce/tinymce, TinyMCE, tinymce
High
about 1 month ago
TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments
packagist, nuget, npm
tinymce/tinymce, TinyMCE, tinymce
High
about 1 month ago
TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes
packagist, nuget, npm
tinymce/tinymce, TinyMCE, tinymce
High
about 1 month ago
TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs
packagist, nuget, npm
tinymce/tinymce, TinyMCE, tinymce
Moderate
about 1 month ago
Nerdbank.MessagePack has Inefficient CPU Computation
nuget
Nerdbank.MessagePack
Moderate
about 1 month ago
Nerdbank.MessagePack has a memory amplification DoS in collection deserialization
nuget
Nerdbank.MessagePack
Moderate
about 2 months ago
ImageMagick: Heap Buffer Over-Read in distributed pixel cache server
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking
nuget
Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Heap Buffer Over-Write in distributed pixel cache server
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
about 2 months ago
ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
about 2 months ago
ImageMagick: Division by Zero in binomial kernel
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix
nuget
Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog
nuget
Umbraco.Cms
Moderate
about 2 months ago
Umbraco.Cms: Open Redirect Vulnerability in Surface Controllers
nuget
Umbraco.Cms
Moderate
about 2 months ago
OpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycle
nuget
OpenMcdf
High
about 2 months ago
Scriban: array.insert_at index parameter DoS bypasses LoopLimit and LimitToString
nuget
scriban
Moderate
about 2 months ago
ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Stack overflow in fx operation
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Use-After-Free in MSL decoder.
nuget
Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
about 2 months ago
ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
about 2 months ago
ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Policy Bypass in MNG coder could
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
about 2 months ago
Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability
nuget
Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
about 2 months ago
Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability
nuget
Microsoft.AspNetCore.App.Runtime.osx-x64, Microsoft.AspNetCore.App.Runtime.osx-arm64, Microsoft.AspNetCore.App.Runtime.linux-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm, Microsoft.AspNetCore.App.Runtime.linux-arm64, Microsoft.AspNetCore.App.Runtime.linux-arm, Microsoft.AspNetCore.App.Runtime.win-x86, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-arm
High
about 2 months ago
Microsoft Security Advisory CVE-2026-32175 – .NET Core Tampering Vulnerability
nuget
Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm
Moderate
about 2 months ago
ImageMagick: Policy Bypass in PSD decoder
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Out-of-Bounds Read of a single byte in meta encoder
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
Microsoft DirectX12: .spritefont multiply overflow only in 32-bit builds
nuget
directxtk12_uwp, directxtk12_desktop_win10
Moderate
about 2 months ago
Microsoft DirectX: .spritefont multiply overflow only in 32-bit builds
nuget
directxtk_uwp, directxtk_desktop_win10
Moderate
about 2 months ago
ImageMagick: Heap Buffer Over-Read in IPTC encoder
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Critical
about 2 months ago
Marten has an injection vulnerability in its full-text search regConfig parameter
nuget
Marten
Moderate
2 months ago
oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)
pypi, nuget, cargo
oxidize-pdf, OxidizePdf.NET
Moderate
2 months ago
SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant)
nuget
SharpCompress
Moderate
2 months ago
OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured
nuget
OpenTelemetry.Exporter.Instana
High
2 months ago
Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect
go, npm, pypi, nuget, maven
github.com/microsoft/kiota-http-go, kiota-typescript, microsoft-kiota-http, Microsoft.Kiota.Abstractions, com.microsoft.kiota:microsoft-kiota-abstractions
High
2 months ago
Nerdbank.MessagePack: Attacker-controlled stackalloc in DateTime decoding causes process-terminating StackOverflowException
nuget
Nerdbank.MessagePack
High
2 months ago
Snappier has an infinite loop during SnappyStream decompression with malformed framed input
nuget
Snappier
Moderate
2 months ago
OpAMP client reads unbounded HTTP response bodies
nuget
OpenTelemetry.OpAmp.Client
High
2 months ago
YAFNET has Stored XSS in Forum Thread Posts/Replies that Allows Arbitrary JavaScript Execution for All Thread Viewers
nuget
YAFNET.Core
High
2 months ago
YAFNET: Pre-Handler Authorization Bypass on Admin Pages Enables Blind SQL Execution via `/Admin/RunSql`
nuget
YAFNET.Core
High
2 months ago
YAFNET has Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected `User-Agent` Header
nuget
YAFNET.Core
Filter by Severity
Filter by Package
Microsoft.ChakraCore
247
Magick.NET-Q16-HDRI-AnyCPU
132
Magick.NET-Q16-AnyCPU
132
Magick.NET-Q16-HDRI-OpenMP-arm64
126
Magick.NET-Q16-HDRI-x64
123
Magick.NET-Q16-HDRI-arm64
123
Magick.NET-Q16-HDRI-x86
123
Magick.NET-Q16-OpenMP-arm64
120
Magick.NET-Q16-OpenMP-x64
120
Magick.NET-Q16-arm64
117
Magick.NET-Q8-AnyCPU
117
Magick.NET-Q16-x86
116
Magick.NET-Q16-x64
112
Magick.NET-Q8-x86
112
Magick.NET-Q8-OpenMP-arm64
112
Magick.NET-Q8-arm64
110
Magick.NET-Q8-OpenMP-x64
109
Magick.NET-Q8-x64
103
Magick.NET-Q16-HDRI-OpenMP-x64
87
Magick.NET-Q16-OpenMP-x86
60
DotNetNuke.Core
36
Microsoft.AspNetCore.App.Runtime.win-x64
21
Microsoft.AspNetCore.App.Runtime.linux-arm
20
Microsoft.AspNetCore.App.Runtime.linux-x64
20
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
20
Microsoft.AspNetCore.App.Runtime.linux-arm64
20
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
20
Microsoft.AspNetCore.App.Runtime.win-arm
19
Microsoft.AspNetCore.App.Runtime.win-x86
19
Microsoft.AspNetCore.App.Runtime.osx-x64
18
Microsoft.AspNetCore.App.Runtime.win-arm64
18
Microsoft.NetCore.App.Runtime.win-x64
17
Microsoft.NetCore.App.Runtime.win-arm64
17
Microsoft.NetCore.App.Runtime.win-arm
17
Microsoft.NetCore.App.Runtime.win-x86
16
Umbraco.Cms
15
Microsoft.AspNetCore.App.Runtime.linux-musl-arm
15
TinyMCE
14
MessagePack
14
Microsoft.NetCore.App.Runtime.linux-arm
14
tinymce/tinymce
14
tinymce
14
Umbraco.CMS
13
Microsoft.AspNetCore.App.Runtime.osx-arm64
13
Microsoft.NetCore.App.Runtime.linux-musl-arm64
13
Microsoft.NetCore.App.Runtime.linux-arm64
13
Microsoft.NetCore.App.Runtime.linux-musl-x64
13
Microsoft.NetCore.App.Runtime.linux-x64
13
Microsoft.NetCore.App.Runtime.linux-musl-arm
13
Microsoft.NETCore.App.Runtime.win-x86
12
Microsoft.NetCore.App.Runtime.osx-arm64
12
Microsoft.NetCore.App.Runtime.osx-x64
12
Microsoft.NETCore.App.Runtime.win-arm64
12
Microsoft.NETCore.App.Runtime.win-x64
12
Scriban.Signed
11
OPCFoundation.NetStandard.Opc.Ua.Core
11
Microsoft.NETCore.App.Runtime.linux-x64
10
Microsoft.NETCore.App
10
Microsoft.NETCore.App.Runtime.linux-arm
9
Microsoft.AspNetCore.All
9
Microsoft.NETCore.App.Runtime.linux-musl-arm64
9
Microsoft.NETCore.App.Runtime.linux-arm64
9
Microsoft.AspNetCore.App
8
CoreWCF.Primitives
8
Microsoft.NETCore.App.Runtime.osx-x64
8
Microsoft.NETCore.App.Runtime.win-arm
8
CefSharp.Common
8
Microsoft.NETCore.App.Runtime.linux-musl-x64
8
Piranha
8
SixLabors.ImageSharp
7
org.webjars.npm:jquery-ui
7
jQuery.UI.Combined
7
jquery-ui
7
OPCFoundation.NetStandard.Opc.Ua
6
jQuery
6
CefSharp.Wpf
6
Microsoft.AspNetCore.Server.Kestrel.Core
6
jquery
6
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64
5
Umbraco.Forms
5
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64
5
UmbracoCms
5
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64
5
Microsoft.NETCore.App.Runtime.linux-musl-arm
5
System.Security.Cryptography.Xml
5
DNN.PLATFORM
5
Microsoft.WindowsDesktop.App.Runtime.win-x86
5
CefSharp.Wpf.HwndHost
5
Microsoft.WindowsDesktop.App.Runtime.win-arm64
5
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64
5
CefSharp.WinForms
5
Microsoft.WindowsDesktop.App.Runtime.win-x64
5
Microsoft.NETCore.App.Runtime.rhel.6-x64
5
Microsoft.NETCore.App.Runtime.Mono.linux-arm64
4
Microsoft.Native.Quic.MsQuic.Schannel
4
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64
4
Microsoft.NETCore.App.Runtime.Mono.linux-arm
4
Microsoft.AspNetCore.Mvc
4
Serenity.Net.Core
4
Snowflake.Data
4
SSCMS
4
Microsoft.NETCore.App.Runtime.Mono.linux-x64
4
DotVVM
4
Microsoft.Native.Quic.MsQuic.OpenSSL
4
Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64
4
NuGet.Commands
4
NuGet.CommandLine
4
org.webjars.npm:jquery
4
SharpZipLib
4
Microsoft.AspNetCore.Mvc.Core
4
Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64
4
Microsoft.NETCore.App.Runtime.Mono.osx-x64
3
Azure.Identity
3
Microsoft.AspNetCore.Identity
3
YAFNET.Core
3
CefSharp.Common.NETCore
3
OPCFoundation.NetStandard.Opc.Ua.Server
3
OpenTelemetry.Exporter.OpenTelemetryProtocol
3
HtmlSanitizer
3
BouncyCastle.Cryptography
3
bootstrap
3
Oqtane.Server
3
Nerdbank.MessagePack
3
AjaxNetProfessional
3
Umbraco.Cms.Web.BackOffice
3
Microsoft.AspNetCore.Mvc.Cors
3
Sustainsys.Saml2
3
jquery-rails
3
Umbraco.Cms.Core
3
wix
3
System.Private.Uri
3
UmbracoForms
3
log4net
3
BouncyCastle
3
Scriban
3
Steeltoe.Management.Endpoint
3
jquery-ui-rails
3
System.Text.Encodings.Web
3
Oqtane.Framework
3
System.Net.Http
3
UmbracoCms.Core
3
System.Net.Security
2
Microsoft.AspNetCore.Mvc.Formatters.Json
2
MimeKit
2
Csla
2
System.Net.Http.WinHttpHandler
2
NuGet.Protocol
2
@umbraco-cms/backoffice
2
Steeltoe.Discovery.Eureka
2
Microsoft.Build.Tasks.Core
2
Microsoft.AspNetCore.SignalR.Protocols.MessagePack
2
Microsoft.AspNetCore.Server.HttpSys
2
System.Data.SqlClient
2
Microsoft.Data.SqlClient
2
twbs/bootstrap
2
moment
2
CoreWCF.NetFramingBase
2
sharpcompress
2
org.bouncycastle:bcprov-jdk15to18
2
org.bouncycastle:bctls-jdk18on
2
NuGet.Packaging
2
Microsoft.AspNetCore.Mvc.Abstractions
2
System.Net.WebSockets.Client
2
Microsoft.AspNetCore.Mvc.DataAnnotations
2
OrchardCore
2
FormCMS
2
Moment.js
2
Microsoft.AspNetCore.Mvc.Formatters.Xml
2
Microsoft.AspNetCore.Http.Connections
2
DotNetZip
2
starkbank-ecdsa
2
bootstrap
2
ServiceStack
2
System.Linq.Dynamic.Core
2
CefSharp.OffScreen
2
org.bouncycastle:bctls-jdk14
2
mpxj
2
System.Management.Automation
2
org.bouncycastle:bcprov-jdk18on
2
bootstrap-sass
2
Yarp.ReverseProxy
2
Umbraco.Cms.Api.Management
2
System.Text.Json
2
net.sf.mpxj-for-csharp
2
Snappier
2
OpenTelemetry.Api
2
PanelSwWix4.Sdk
2
System.Security.Cryptography.Cose
2
UmbracoCMS
2
IdentityServer4
2
Duende.IdentityServer
2
PeterO.Cbor
2
UmbracoCMS.Core
2
Amazon.IonDotnet
2
RestSharp
2
Umbraco.Cms.StaticAssets
2
Microsoft.AspNetCore.Mvc.ApiExplorer
2
bootstrap
2
DotNetNuke.Web
2
Microsoft.AspNetCore.Mvc.Localization
2
Filter by Repository
https://github.com/chakra-core/ChakraCore
214
https://github.com/dotnet/runtime
38
https://github.com/umbraco/Umbraco-CMS
35
https://github.com/dnnsoftware/Dnn.Platform
23
https://github.com/github/advisory-database
18
https://github.com/dotnet/aspnetcore
16
https://github.com/OPCFoundation/UA-.NETStandard
15
https://github.com/ImageMagick/ImageMagick
14
https://github.com/tinymce/tinymce
10
https://github.com/jquery/jquery
8
https://github.com/cefsharp/CefSharp
8
https://github.com/SixLabors/ImageSharp
7
https://github.com/PiranhaCMS/piranha.core
6
https://github.com/jquery/jquery-ui
6
https://github.com/snowflakedb/snowflake-connector-net
4
https://github.com/NuGet/NuGet.Client
4
https://github.com/icsharpcode/SharpZipLib
4
https://github.com/siteserver/cms
4
https://github.com/microsoft/msquic
3
https://github.com/bcgit/bc-csharp
3
https://github.com/serenity-is/Serenity
3
https://github.com/DuendeSoftware/IdentityServer
3
https://github.com/umbraco/Umbraco.Forms.Issues
3
https://github.com/michaelschwarz/Ajax.NET-Professional
3
https://github.com/dotnet/wpf
3
https://github.com/PowerShell/PowerShell
3
https://github.com/Sustainsys/Saml2
3
https://github.com/oqtane/oqtane.framework
3
https://github.com/wixtoolset/issues
3
https://github.com/dotnet/sdk
3
https://github.com/Azure/azure-sdk-for-net
3
https://github.com/dotnet/corefx
2
https://github.com/microsoft/reverse-proxy
2
https://github.com/orchardcms/orchardcore
2
https://github.com/peteroupc/CBOR
2
https://github.com/Microsoft/ChakraCore
2
https://github.com/twbs/bootstrap
2
https://github.com/tgstation/tgstation-server
2
https://github.com/joniles/mpxj
2
https://github.com/restsharp/RestSharp
2
https://github.com/nirbar/wix4
2
https://github.com/Orckestra/C1-CMS-Foundation
2
https://github.com/mganss/HtmlSanitizer
2
https://github.com/open-telemetry/opentelemetry-dotnet
2
https://github.com/haf/DotNetZip.Semverd
2
https://github.com/FormCms/FormCms
2
https://github.com/reactiveui/refit
2
https://github.com/dotnet/msbuild
2
https://github.com/Aiko-IT-Systems/DisCatSharp
2
https://github.com/amazon-ion/ion-dotnet
2
https://github.com/moment/moment
2
https://github.com/nirbar/wix3
2
https://github.com/akkadotnet/akka.net
2
https://github.com/zzzprojects/System.Linq.Dynamic.Core
2
https://github.com/theori-io/chakra-2016-11
2
https://github.com/Pryaxis/TShock
2
https://github.com/gordon-matt/elFinder.NetCore
2
https://github.com/ServiceStack/ServiceStack
2
https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet
2
https://github.com/adamhathcock/sharpcompress
2
https://github.com/mongodb/mongo-csharp-driver
2
https://github.com/adplug/adplug
1
https://github.com/Devolutions/XTS.NET
1
https://github.com/jquery-validation/jquery-validation
1
https://github.com/dnnsoftware/dnn.platform
1
https://github.com/dub-flow/vulnerability-research
1
https://github.com/elastic/apm-agent-dotnet
1
https://github.com/nhibernate/nhibernate-core
1
https://github.com/MessagePack-CSharp/MessagePack-CSharp
1
https://github.com/HangfireIO/Hangfire
1
https://github.com/jstedfast/MimeKit
1
https://github.com/umbraco/Umbraco.Commerce.Issues
1
https://github.com/MarimerLLC/csla
1
https://github.com/italia/spid-aspnetcore
1
https://github.com/apache/activemq-nms-openwire
1
https://github.com/QuantConnect/Lean
1
https://github.com/imazen/resizer
1
https://github.com/Brondahl/EnumStringValues
1
https://github.com/umbraco/Umbraco.Workflow.Issues
1
https://github.com/turquoiseowl/i18n
1
https://github.com/dotnet/diagnostics
1
https://github.com/mguinness/elFinder.AspNet
1
https://github.com/AsynkronIT/Wire
1
https://github.com/microsoft/DirectXTex
1
https://github.com/madskristensen/Miniblog.Core
1
https://github.com/gsemac/Gsemac.Common
1
https://github.com/jellyfin/jellyfin-web
1
https://github.com/italia/cie-aspnetcore
1
https://github.com/recurly/recurly-client-net
1
https://github.com/CoreWCF/CoreWCF
1
https://github.com/Shazwazza/Smidge
1
https://github.com/TrueLayer/truelayer-dotnet
1
https://github.com/SeppPenner/WindowsHello
1
https://github.com/personnummer/csharp
1
https://github.com/pubnub/javascript
1
https://github.com/SinGooCMS/SinGooCMSUtility
1
https://github.com/Jasig/phpCAS
1
https://github.com/SeriaWei/ZKEACMS
1
https://github.com/OrchardCMS/OrchardCore
1
https://github.com/FastReports/FastReport
1
https://github.com/PowerShell/Announcements
1
https://github.com/serilog-contrib/serilog-enrichers-clientinfo
1
https://github.com/sshnet/NET
1
https://github.com/mbdavid/LiteDB
1
https://github.com/jchristn/IpMatcher
1
https://github.com/google/brotli
1
https://github.com/kapetan/dns
1
https://github.com/NuGet/Home
1
https://github.com/brantburnett/Snappier
1
https://github.com/apache/logging-log4net
1
https://github.com/starkbank/ecdsa-dotnet
1
https://github.com/SteeltoeOSS/security-advisories
1
https://github.com/microsoft/botbuilder-dotnet
1
https://github.com/jonschlinkert/set-value
1
https://gitlab.com/eLeN3Re/cve-2020-9472
1
https://github.com/OPCFoundation/UA-.NET-Legacy
1
https://github.com/spassarop/antisamy-dotnet
1
https://github.com/aaubry/YamlDotNet
1
https://github.com/NancyFx/Nancy
1
https://github.com/blogifierdotnet/Blogifier
1
https://github.com/mwilliamson/mammoth.js
1
https://github.com/npgsql/npgsql
1
https://github.com/google/protobuf
1
https://github.com/Antaris/RazorEngine
1
https://github.com/AzureAD/microsoft-identity-web
1
https://gitlab.com/eLeN3Re/cve-2020-9471
1
https://github.com/git-ecosystem/git-credential-manager
1
https://github.com/DuendeSoftware/foss
1
https://github.com/snapappointments/bootstrap-select
1
https://github.com/glennrp/libpng
1
https://github.com/Azure/azure-sdk-for-go
1
https://github.com/moq/moq
1
https://github.com/apache/avro
1
https://github.com/dotnetcore/AgileConfig
1
https://github.com/Archomeda/Gw2Sharp
1
https://github.com/LittleBigRefresh/Bunkum
1
https://github.com/ldqk/Masuit.Tools
1
https://github.com/imazen/imageflow
1
https://github.com/trannamtrung1st/elFinder.Net.Core
1
https://github.com/apache/lucenenet
1
https://github.com/drewnoakes/metadata-extractor-dotnet
1
https://github.com/pentesttoolscom/vulnerability-research
1
https://github.com/AzureAD/microsoft-authentication-library-for-dotnet
1
https://github.com/microsoft/bond
1
https://github.com/Bluegrams/YoutubeDLSharp
1
https://github.com/couchbase/couchbase-net-client
1
https://github.com/ravibpatel/AutoUpdater.NET
1
https://github.com/starkbank/ecdsa-python
1
https://github.com/neuecc/MessagePack-CSharp
1
https://github.com/riganti/dotvvm
1
https://github.com/open-telemetry/opentelemetry-dotnet-instrumentation
1
https://github.com/microsoft/ChakraCore
1
https://github.com/DuendeSoftware/Duende.AccessTokenManagement
1
https://github.com/IowaComputerGurus/aspnetcore.utilities.cloudstorage
1
https://github.com/kubernetes/kubernetes
1
https://github.com/JamesNK/Newtonsoft.Json
1
https://github.com/jellyfin/jellyfin
1
https://github.com/MichaelGrafnetter/DSInternals
1