nuget
Security Advisories in nuget
High
3 days ago
SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)
nuget
SIPSorcery
High
3 days ago
SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing
nuget
SIPSorcery
High
4 days ago
SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames
nuget
SSH.NET
Moderate
4 days ago
Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability
nuget
Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
4 days ago
Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability
nuget
Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
4 days ago
Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability
nuget
Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
4 days ago
Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability
nuget
Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
Moderate
4 days ago
Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
nuget
Microsoft.NETCore.App.Runtime.osx-x64, Microsoft.NETCore.App.Runtime.osx-arm64, Microsoft.NETCore.App.Runtime.linux-x64, Microsoft.NETCore.App.Runtime.linux-musl-x64, Microsoft.NETCore.App.Runtime.linux-musl-arm64, Microsoft.NETCore.App.Runtime.linux-musl-arm, Microsoft.NETCore.App.Runtime.linux-arm64, Microsoft.NETCore.App.Runtime.linux-arm
High
4 days ago
Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability
nuget
Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
4 days ago
Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability
nuget
Microsoft.NETCore.App.Runtime.linux-arm, Microsoft.NETCore.App.Runtime.win-x86, Microsoft.NETCore.App.Runtime.win-x64, Microsoft.NETCore.App.Runtime.win-arm64, Microsoft.NETCore.App.Runtime.osx-x64, Microsoft.NETCore.App.Runtime.osx-arm64, Microsoft.NETCore.App.Runtime.linux-x64, Microsoft.NETCore.App.Runtime.linux-musl-x64, Microsoft.NETCore.App.Runtime.linux-musl-arm64, Microsoft.NETCore.App.Runtime.linux-musl-arm, Microsoft.NETCore.App.Runtime.linux-arm64
Moderate
4 days ago
Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability
nuget
Microsoft.NETCore.App.Runtime.osx-x64, Microsoft.NETCore.App.Runtime.osx-arm64, Microsoft.NETCore.App.Runtime.linux-x64, Microsoft.NETCore.App.Runtime.linux-musl-x64, Microsoft.NETCore.App.Runtime.linux-musl-arm64, Microsoft.NETCore.App.Runtime.linux-musl-arm, Microsoft.NETCore.App.Runtime.linux-arm64, Microsoft.NETCore.App.Runtime.linux-arm
High
4 days ago
Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability
nuget
Microsoft.NETCore.App.Runtime.win-x86, Microsoft.NETCore.App.Runtime.win-x64, Microsoft.NETCore.App.Runtime.win-arm64
Moderate
15 days ago
ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
18 days ago
Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability
nuget
System.Security.Cryptography.Xml
High
18 days ago
SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)
nuget
SIPSorcery
Low
23 days ago
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
pypi, go, maven, nuget, npm
aws-cdk.aws-codebuild, aws-cdk-lib, github.com/aws/aws-cdk-go/awscdk, software.amazon.awscdk:codebuild, Amazon.CDK.AWS.CodeBuild, @aws-cdk/aws-codebuild, github.com/aws/aws-cdk-go/awscdk/v2, software.amazon.awscdk:aws-cdk-lib, Amazon.CDK.Lib
Moderate
23 days ago
ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
23 days ago
ImageMagick: Heap Buffer Over-Write in fx operation
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
23 days ago
ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided
nuget
Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
23 days ago
Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)
nuget
Microsoft.OpenApi.Kiota
High
23 days ago
Microsoft Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName
nuget
Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
Critical
23 days ago
Microsoft Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info`
nuget
Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
High
23 days ago
Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF
nuget
Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
High
23 days ago
Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref
nuget
Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
Critical
23 days ago
Microsoft Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions
nuget
Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
High
23 days ago
Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator
nuget
Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
High
23 days ago
Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator
nuget
Microsoft.OpenAPI.Kiota.Builder, Microsoft.OpenAPI.Kiota
High
23 days ago
Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator
nuget
Microsoft.OpenAPI.Kiota.Builder, Microsoft.OpenAPI.Kiota
Low
23 days ago
ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
23 days ago
Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection
nuget
Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
Low
23 days ago
ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Memory Leak in ICON decoder when allocation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Memory leak in VIFF encoder when allocation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Memory Leak in MIFF encoder when allocaton fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Memory Leak in YUV decoder when opening of blob fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Memory Leak in TIFF encoder when an allocation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Memory Leak in JNG encoder when a blob could not be opened
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Memory Leak in hough lines operation when an operation fails
nuget
Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Memory Leak in color transformation to log colorspace when operation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Information Disclosure when printing profiles with debug enabled
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Use-After-Free when freetype initialization fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Policy Bypass in script operation due to missing checks
nuget
Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Heap-use-after-free via XMP profile could result in a crash
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
23 days ago
ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
23 days ago
ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
23 days ago
ImageMagick: Policy Bypass possible with matrix-backed operations
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
23 days ago
ImageMagick: Policy Bypass in concatenate operation due to missing checks
nuget
Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
23 days ago
ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
23 days ago
ImageMagick: Infinite Loop in connected-components when providing invalid arguments
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
23 days ago
ImageMagick: Stack Overflow in MVG decoder due to missing depth check.
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
23 days ago
ImageMagick: Use-After-Free in crafted 8BIM when identifying an image
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
23 days ago
ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged
nuget
Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
26 days ago
Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability
nuget
Microsoft.AspNetCore.App.Runtime.linux-arm
High
26 days ago
Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability
nuget
Microsoft.NET.Build.Containers
High
26 days ago
Microsoft Security Advisory CVE-2026-47300 – .NET Elevation of Privilege Vulnerability
nuget
Microsoft.AspNetCore.Authentication.Negotiate
High
26 days ago
Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability
nuget
Microsoft.AspNetCore.Authentication.Negotiate
High
26 days ago
Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability
nuget
System.Security.Cryptography.Xml
High
26 days ago
Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability
nuget
Microsoft.WindowsDesktop.App.Runtime.win-arm64, Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64
High
26 days ago
Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability
nuget
Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm
Moderate
26 days ago
Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability
nuget
Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm, Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64
High
26 days ago
Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability
nuget
System.Security.Cryptography.Xml
High
26 days ago
Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability
nuget
Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm
High
26 days ago
Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability
nuget
System.Security.Cryptography.Xml
High
26 days ago
Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability
nuget
Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm
High
26 days ago
Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability
nuget
System.Security.Cryptography.Xml
High
26 days ago
Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability
nuget
Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm, Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, System.Security.Cryptography.Xml
High
26 days ago
Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability
nuget
Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm
Moderate
29 days ago
AngleSharp HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass
nuget
AngleSharp
High
29 days ago
Prompty: Arbitrary file read via file reference expansion
nuget, cargo, npm, pypi
Prompty.Core, prompty, @prompty/core
High
about 1 month ago
dd-trace-dotnet: Improper parsing of W3C baggage headers may lead to DoS
nuget
Datadog.Trace.OpenTracing, Datadog.Trace
Moderate
about 1 month ago
Umbraco.AI discloses sensitive application configuration values
nuget
Umbraco.AI
High
about 1 month ago
Scriban: Template Writes to Arbitrary CLR Properties via `TypedObjectAccessor` (Mass Assignment + `private` / `init` / `internal` Setter Bypass)
nuget
Scriban
Low
about 1 month ago
Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding
nuget
Steeltoe.Configuration.Encryption
Moderate
about 1 month ago
Steeltoe: TLS private keys written to /tmp with default permissions, never deleted
nuget
Steeltoe.Configuration.Abstractions
Moderate
about 1 month ago
Steeltoe's static JWKS cache shared across schemes and never invalidated
nuget
Steeltoe.Security.Authentication.CloudFoundryBase, Steeltoe.Security.Authentication.OpenIdConnect, Steeltoe.Security.Authentication.JwtBearer
Moderate
about 1 month ago
Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission
nuget
Steeltoe.Management.EndpointBase, Steeltoe.Management.Endpoint
High
about 1 month ago
Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords
nuget
Steeltoe.Management.EndpointCore, Steeltoe.Management.Endpoint
High
about 1 month ago
Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch
nuget
Steeltoe.Discovery.Eureka
High
about 1 month ago
Steeltoe vulnerable to management-port isolation bypass via spoofed Host header
nuget
Steeltoe.Management.EndpointCore, Steeltoe.Management.Endpoint
Moderate
about 2 months ago
CefSharp.Common: `FolderSchemeHandlerFactory` path boundary check can expose files outside the configured root folder
nuget
CefSharp.Common
High
about 2 months ago
Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing
nuget
Microsoft.OpenAPI
Moderate
about 2 months ago
ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Memory Leak in wand option parser when providing invalid arguments
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
Scriban: ExpressionDepthLimit guard is non-enforcing — parser-recursion DoS in 6.6.0–7.2.0 (incomplete fix for GHSA-wgh7-7m3c-fx25 / GHSA-p6q4-fgr8-vx4p)
nuget
Scriban
Moderate
about 2 months ago
Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx
nuget
Scriban
Moderate
about 2 months ago
ImageMagick has Null Pointer Dereference caused by the distort operation when passing incorrect arguments
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick has a Use-After-Free when allocation in CheckPrimitiveExtent fails
nuget
Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
about 2 months ago
ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
about 2 months ago
ImageMagick: Policy Bypass can Trigger an Out-of-Memory condition
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Policy Bypass can read disallowed files via symlink
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
about 2 months ago
ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick has a Heap Buffer Over-Write in MAT decoder on 32-bit systems
nuget
Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick Vulnerable to Stack Overflow in its MVG Decoder
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick has an Infinite Loop in subimage-search with crafted image
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic arguments
nuget
MessagePack
Moderate
about 2 months ago
MessagePack-CSharp: InterfaceLookupFormatter bypasses collision-resistant comparer settings
nuget
MessagePack
Filter by Severity
Filter by Package
Microsoft.ChakraCore
247
Magick.NET-Q16-AnyCPU
161
Magick.NET-Q16-HDRI-AnyCPU
159
Magick.NET-Q16-HDRI-OpenMP-arm64
154
Magick.NET-Q16-HDRI-x86
150
Magick.NET-Q16-HDRI-x64
149
Magick.NET-Q16-HDRI-arm64
146
Magick.NET-Q16-OpenMP-arm64
145
Magick.NET-Q16-OpenMP-x64
144
Magick.NET-Q16-x86
144
Magick.NET-Q8-AnyCPU
143
Magick.NET-Q16-arm64
143
Magick.NET-Q8-x86
138
Magick.NET-Q16-x64
137
Magick.NET-Q8-arm64
137
Magick.NET-Q8-OpenMP-arm64
136
Magick.NET-Q8-OpenMP-x64
135
Magick.NET-Q8-x64
130
Magick.NET-Q16-HDRI-OpenMP-x64
86
Magick.NET-Q16-OpenMP-x86
61
DotNetNuke.Core
36
Microsoft.NetCore.App.Runtime.win-arm64
22
Microsoft.NetCore.App.Runtime.win-x64
22
Microsoft.NetCore.App.Runtime.win-arm
22
Microsoft.NetCore.App.Runtime.win-x86
22
Microsoft.NetCore.App.Runtime.linux-musl-arm
21
Microsoft.NetCore.App.Runtime.linux-arm
21
Microsoft.NetCore.App.Runtime.linux-arm64
21
Microsoft.AspNetCore.App.Runtime.win-x64
21
Microsoft.AspNetCore.App.Runtime.linux-arm
20
Microsoft.AspNetCore.App.Runtime.linux-x64
19
Microsoft.NetCore.App.Runtime.linux-musl-x64
19
Microsoft.AspNetCore.App.Runtime.win-x86
19
Microsoft.NetCore.App.Runtime.linux-musl-arm64
19
Microsoft.NetCore.App.Runtime.linux-x64
18
Microsoft.AspNetCore.App.Runtime.linux-arm64
18
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
18
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
18
Microsoft.AspNetCore.App.Runtime.osx-x64
18
Microsoft.AspNetCore.App.Runtime.win-arm
18
Microsoft.NetCore.App.Runtime.osx-arm64
17
Microsoft.AspNetCore.App.Runtime.win-arm64
17
Microsoft.NetCore.App.Runtime.osx-x64
17
Umbraco.Cms
15
Microsoft.NETCore.App.Runtime.win-x64
15
tinymce/tinymce
14
Microsoft.NETCore.App.Runtime.win-x86
14
MessagePack
14
tinymce
14
Microsoft.NETCore.App.Runtime.win-arm64
14
TinyMCE
14
Umbraco.CMS
13
Microsoft.AspNetCore.App.Runtime.linux-musl-arm
13
Microsoft.NETCore.App.Runtime.linux-x64
12
Microsoft.AspNetCore.App.Runtime.osx-arm64
12
Microsoft.NETCore.App.Runtime.linux-musl-arm64
11
Microsoft.WindowsDesktop.App.Runtime.win-x86
11
Microsoft.WindowsDesktop.App.Runtime.win-x64
11
OPCFoundation.NetStandard.Opc.Ua.Core
11
Microsoft.WindowsDesktop.App.Runtime.win-arm64
11
Microsoft.NETCore.App.Runtime.linux-arm
11
Microsoft.NETCore.App.Runtime.osx-x64
11
Microsoft.NETCore.App.Runtime.linux-musl-x64
11
System.Security.Cryptography.Xml
11
Microsoft.NETCore.App.Runtime.linux-arm64
11
Microsoft.NETCore.App.Runtime.linux-musl-arm
9
Microsoft.NETCore.App
9
Scriban
8
Microsoft.NETCore.App.Runtime.win-arm
8
Microsoft.OpenApi.Kiota
8
CoreWCF.Primitives
8
CefSharp.Common
8
Piranha
8
Microsoft.AspNetCore.All
8
jQuery.UI.Combined
7
org.webjars.npm:jquery-ui
7
SixLabors.ImageSharp
7
scriban
7
Microsoft.OpenApi.Kiota.Builder
7
jquery-ui
7
jQuery
6
Microsoft.AspNetCore.App
6
CefSharp.Wpf
6
OPCFoundation.NetStandard.Opc.Ua
6
Microsoft.AspNetCore.Server.Kestrel.Core
6
Microsoft.NETCore.App.Runtime.osx-arm64
5
jquery
5
UmbracoCms
5
Umbraco.Forms
5
DNN.PLATFORM
5
NuGet.CommandLine
5
Microsoft.NETCore.App.Runtime.Mono.osx-x64
5
CefSharp.WinForms
5
CefSharp.Wpf.HwndHost
5
Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64
5
DotVVM
4
Snowflake.Data
4
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64
4
Microsoft.NETCore.App.Runtime.rhel.6-x64
4
NuGet.Commands
4
Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64
4
bootstrap
4
Microsoft.NETCore.App.Runtime.Mono.linux-arm64
4
Serenity.Net.Core
4
Microsoft.Native.Quic.MsQuic.OpenSSL
4
Microsoft.NETCore.App.Runtime.Mono.linux-arm
4
Microsoft.AspNetCore.Mvc.Core
4
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64
4
Microsoft.Native.Quic.MsQuic.Schannel
4
Microsoft.NETCore.App.Runtime.Mono.linux-x64
4
Microsoft.AspNetCore.Mvc
4
SharpZipLib
4
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64
4
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64
4
UmbracoForms
4
SSCMS
4
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64
4
Sustainsys.Saml2
3
jquery-rails
3
org.webjars.npm:jquery
3
HtmlSanitizer
3
Microsoft.AspNetCore.Identity
3
BouncyCastle
3
System.Net.Http
3
UmbracoCms.Core
3
System.Private.Uri
3
jquery-ui-rails
3
NuGet.Protocol
3
Oqtane.Server
3
Umbraco.Cms.Web.BackOffice
3
BouncyCastle.Cryptography
3
bootstrap-sass
3
bootstrap
3
OpenTelemetry.Exporter.OpenTelemetryProtocol
3
Azure.Identity
3
YAFNET.Core
3
Nerdbank.MessagePack
3
wix
3
SIPSorcery
3
Oqtane.Framework
3
CefSharp.Common.NETCore
3
Steeltoe.Management.Endpoint
3
System.Text.Encodings.Web
3
log4net
3
bootstrap
3
Umbraco.Cms.Core
3
Microsoft.AspNetCore.Mvc.Cors
3
bootstrap-sass
3
OPCFoundation.NetStandard.Opc.Ua.Server
3
AjaxNetProfessional
3
Umbraco.Cms.Api.Management
2
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86
2
ServiceStack
2
NuGet.Packaging
2
System.Management.Automation
2
Amazon.IonDotnet
2
System.Net.WebSockets.Client
2
Microsoft.AspNetCore.Mvc.Formatters.Xml
2
org.webjars:bootstrap
2
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm
2
Microsoft.AspNetCore.Server.HttpSys
2
Microsoft.AspNetCore.Mvc.DataAnnotations
2
Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm
2
Microsoft.AspNetCore.Mvc.Formatters.Json
2
OrchardCore
2
mpxj
2
org.bouncycastle:bctls-jdk14
2
PeterO.Cbor
2
CoreWCF.UnixDomainSocket
2
Duende.IdentityServer
2
OpenTelemetry.Api
2
Microsoft.NETCore.App.Runtime.browser-wasm
2
Microsoft.AspNetCore.Mvc.ApiExplorer
2
Microsoft.AspNetCore.Mvc.Razor.Host
2
starkbank-ecdsa
2
Microsoft.AspNetCore.Mvc.ViewFeatures
2
DotNetZip
2
org.bouncycastle:bctls-jdk18on
2
bootstrap.sass
2
System.Net.Http.WinHttpHandler
2
sharpcompress
2
Moment.js
2
MimeKit
2
twbs/bootstrap
2
org.bouncycastle:bcprov-jdk15to18
2
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64
2
Steeltoe.Management.EndpointCore
2
Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64
2
Microsoft.OpenAPI.Kiota.Builder
2
Yarp.ReverseProxy
2
CoreWCF.NetFramingBase
2
DotNetNuke.Web
2
moment
2
org.bouncycastle:bctls-jdk15to18
2
Microsoft.AspNetCore.Mvc.Abstractions
2
Microsoft.NET.Build.Containers
2
Microsoft.Data.SqlClient
2
@umbraco-cms/backoffice
2
Microsoft.AspNetCore.Mvc.TagHelpers
2
PanelSW.Custom.WiX
2
Filter by Repository
https://github.com/chakra-core/ChakraCore
214
https://github.com/dotnet/runtime
38
https://github.com/umbraco/Umbraco-CMS
35
https://github.com/dnnsoftware/Dnn.Platform
23
https://github.com/github/advisory-database
18
https://github.com/dotnet/aspnetcore
16
https://github.com/OPCFoundation/UA-.NETStandard
15
https://github.com/ImageMagick/ImageMagick
14
https://github.com/tinymce/tinymce
10
https://github.com/cefsharp/CefSharp
8
https://github.com/jquery/jquery
7
https://github.com/SixLabors/ImageSharp
7
https://github.com/PiranhaCMS/piranha.core
6
https://github.com/jquery/jquery-ui
6
https://github.com/snowflakedb/snowflake-connector-net
4
https://github.com/icsharpcode/SharpZipLib
4
https://github.com/NuGet/NuGet.Client
4
https://github.com/siteserver/cms
4
https://github.com/DuendeSoftware/IdentityServer
3
https://github.com/dotnet/wpf
3
https://github.com/Sustainsys/Saml2
3
https://github.com/umbraco/Umbraco.Forms.Issues
3
https://github.com/michaelschwarz/Ajax.NET-Professional
3
https://github.com/dotnet/sdk
3
https://github.com/oqtane/oqtane.framework
3
https://github.com/serenity-is/Serenity
3
https://github.com/twbs/bootstrap
3
https://github.com/bcgit/bc-csharp
3
https://github.com/PowerShell/PowerShell
3
https://github.com/wixtoolset/issues
3
https://github.com/Azure/azure-sdk-for-net
3
https://github.com/microsoft/msquic
3
https://github.com/mongodb/mongo-csharp-driver
2
https://github.com/reactiveui/refit
2
https://github.com/Aiko-IT-Systems/DisCatSharp
2
https://github.com/restsharp/RestSharp
2
https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet
2
https://github.com/Pryaxis/TShock
2
https://github.com/akkadotnet/akka.net
2
https://github.com/zzzprojects/System.Linq.Dynamic.Core
2
https://github.com/gordon-matt/elFinder.NetCore
2
https://github.com/ServiceStack/ServiceStack
2
https://github.com/adamhathcock/sharpcompress
2
https://github.com/nirbar/wix4
2
https://github.com/tgstation/tgstation-server
2
https://github.com/Microsoft/ChakraCore
2
https://github.com/peteroupc/CBOR
2
https://github.com/moment/moment
2
https://github.com/open-telemetry/opentelemetry-dotnet
2
https://github.com/dotnet/msbuild
2
https://github.com/nirbar/wix3
2
https://github.com/mganss/HtmlSanitizer
2
https://github.com/microsoft/reverse-proxy
2
https://github.com/orchardcms/orchardcore
2
https://github.com/joniles/mpxj
2
https://github.com/theori-io/chakra-2016-11
2
https://github.com/amazon-ion/ion-dotnet
2
https://github.com/haf/DotNetZip.Semverd
2
https://github.com/FormCms/FormCms
2
https://github.com/dotnet/corefx
2
https://github.com/Orckestra/C1-CMS-Foundation
2
https://github.com/CoreWCF/CoreWCF
1
https://github.com/SeriaWei/ZKEACMS
1
https://github.com/italia/cie-aspnetcore
1
https://github.com/apache/lucenenet
1
https://github.com/DuendeSoftware/Duende.AccessTokenManagement
1
https://github.com/microsoft/DirectXTex
1
https://github.com/IowaComputerGurus/aspnetcore.utilities.cloudstorage
1
https://github.com/AsynkronIT/Wire
1
https://github.com/Jasig/phpCAS
1
https://github.com/kubernetes/kubernetes
1
https://github.com/adplug/adplug
1
https://github.com/dotnet/diagnostics
1
https://github.com/elastic/apm-agent-dotnet
1
https://github.com/MessagePack-CSharp/MessagePack-CSharp
1
https://github.com/trannamtrung1st/elFinder.Net.Core
1
https://github.com/imazen/imageflow
1
https://github.com/starkbank/ecdsa-python
1
https://github.com/umbraco/Umbraco.Commerce.Issues
1
https://github.com/jstedfast/MimeKit
1
https://github.com/ravibpatel/AutoUpdater.NET
1
https://github.com/couchbase/couchbase-net-client
1
https://github.com/italia/spid-aspnetcore
1
https://github.com/umbraco/Umbraco.Workflow.Issues
1
https://github.com/Bluegrams/YoutubeDLSharp
1
https://github.com/TrueLayer/truelayer-dotnet
1
https://github.com/neuecc/MessagePack-CSharp
1
https://github.com/Brondahl/EnumStringValues
1
https://github.com/microsoft/bond
1
https://github.com/riganti/dotvvm
1
https://github.com/open-telemetry/opentelemetry-dotnet-instrumentation
1
https://github.com/mguinness/elFinder.AspNet
1
https://github.com/AzureAD/microsoft-authentication-library-for-dotnet
1
https://github.com/QuantConnect/Lean
1
https://github.com/pentesttoolscom/vulnerability-research
1
https://github.com/microsoft/ChakraCore
1
https://github.com/madskristensen/Miniblog.Core
1
https://github.com/drewnoakes/metadata-extractor-dotnet
1
https://github.com/dnnsoftware/dnn.platform
1
https://github.com/SteeltoeOSS/security-advisories
1
https://github.com/microsoft/botbuilder-dotnet
1
https://github.com/imazen/resizer
1
https://github.com/PowerShell/Announcements
1
https://github.com/jonschlinkert/set-value
1
https://gitlab.com/eLeN3Re/cve-2020-9472
1
https://github.com/glennrp/libpng
1
https://github.com/OPCFoundation/UA-.NET-Legacy
1
https://github.com/spassarop/antisamy-dotnet
1
https://github.com/Azure/azure-sdk-for-go
1
https://github.com/aaubry/YamlDotNet
1
https://github.com/moq/moq
1
https://github.com/apache/avro
1
https://github.com/NancyFx/Nancy
1
https://github.com/blogifierdotnet/Blogifier
1
https://github.com/mwilliamson/mammoth.js
1
https://github.com/dotnetcore/AgileConfig
1
https://github.com/Archomeda/Gw2Sharp
1
https://github.com/npgsql/npgsql
1
https://github.com/google/protobuf
1
https://github.com/AzureAD/microsoft-identity-web
1
https://github.com/Antaris/RazorEngine
1
https://github.com/LittleBigRefresh/Bunkum
1
https://gitlab.com/eLeN3Re/cve-2020-9471
1
https://github.com/DuendeSoftware/foss
1
https://github.com/git-ecosystem/git-credential-manager
1
https://github.com/snapappointments/bootstrap-select
1
https://github.com/ldqk/Masuit.Tools
1
https://github.com/MichaelGrafnetter/DSInternals
1
https://github.com/turquoiseowl/i18n
1
https://github.com/JamesNK/Newtonsoft.Json
1
https://github.com/gsemac/Gsemac.Common
1
https://github.com/jellyfin/jellyfin-web
1
https://github.com/recurly/recurly-client-net
1
https://github.com/jellyfin/jellyfin
1
https://github.com/sshnet/NET
1
https://github.com/serilog-contrib/serilog-enrichers-clientinfo
1
https://github.com/Shazwazza/Smidge
1
https://github.com/SeppPenner/WindowsHello
1
https://github.com/mbdavid/LiteDB
1
https://github.com/jchristn/IpMatcher
1
https://github.com/personnummer/csharp
1
https://github.com/pubnub/javascript
1
https://github.com/google/brotli
1
https://github.com/kapetan/dns
1
https://github.com/SinGooCMS/SinGooCMSUtility
1
https://github.com/NuGet/Home
1
https://github.com/brantburnett/Snappier
1
https://github.com/OrchardCMS/OrchardCore
1
https://github.com/FastReports/FastReport
1
https://github.com/nhibernate/nhibernate-core
1
https://github.com/jquery-validation/jquery-validation
1
https://github.com/Devolutions/XTS.NET
1
https://github.com/apache/logging-log4net
1
https://github.com/starkbank/ecdsa-dotnet
1
https://github.com/HangfireIO/Hangfire
1
https://github.com/MarimerLLC/csla
1
https://github.com/apache/activemq-nms-openwire
1
https://github.com/dub-flow/vulnerability-research
1