An open API service providing security vulnerability metadata for many open source software ecosystems.

Moderate
2 days ago

Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability GSA_kwCzR0hTQS05bXJoLXB3N2MtOW1xbc4ABicc

nuget Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
2 days ago

Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability GSA_kwCzR0hTQS12ZzQ0LWg3NTUtOWh3N84ABicb

nuget Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
2 days ago

Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability GSA_kwCzR0hTQS1meDRxLWdqcngtMmp3Ns4ABica

nuget Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
2 days ago

Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability GSA_kwCzR0hTQS1nZzhjLTMzMzgteHcyZs4ABicZ

nuget Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
Moderate
2 days ago

Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability GSA_kwCzR0hTQS05bXI4LXB3cHctM2oyd84ABicY

nuget Microsoft.NETCore.App.Runtime.osx-x64, Microsoft.NETCore.App.Runtime.osx-arm64, Microsoft.NETCore.App.Runtime.linux-x64, Microsoft.NETCore.App.Runtime.linux-musl-x64, Microsoft.NETCore.App.Runtime.linux-musl-arm64, Microsoft.NETCore.App.Runtime.linux-musl-arm, Microsoft.NETCore.App.Runtime.linux-arm64, Microsoft.NETCore.App.Runtime.linux-arm
High
2 days ago

Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability GSA_kwCzR0hTQS1qcWhwLTIzOHgtcWhnZs4ABicX

nuget Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
2 days ago

Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability GSA_kwCzR0hTQS1tOTNmLXdqOGMtcnA4cM4ABicW

nuget Microsoft.NETCore.App.Runtime.osx-x64, Microsoft.NETCore.App.Runtime.osx-arm64, Microsoft.NETCore.App.Runtime.linux-x64, Microsoft.NETCore.App.Runtime.linux-musl-x64, Microsoft.NETCore.App.Runtime.linux-musl-arm64, Microsoft.NETCore.App.Runtime.linux-musl-arm, Microsoft.NETCore.App.Runtime.linux-arm64, Microsoft.NETCore.App.Runtime.linux-arm, Microsoft.NETCore.App.Runtime.win-x86, Microsoft.NETCore.App.Runtime.win-x64, Microsoft.NETCore.App.Runtime.win-arm64
Moderate
2 days ago

Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability GSA_kwCzR0hTQS1yNm1oLTk1anctZzdxZ84ABicV

nuget Microsoft.NETCore.App.Runtime.osx-x64, Microsoft.NETCore.App.Runtime.osx-arm64, Microsoft.NETCore.App.Runtime.linux-x64, Microsoft.NETCore.App.Runtime.linux-musl-x64, Microsoft.NETCore.App.Runtime.linux-musl-arm64, Microsoft.NETCore.App.Runtime.linux-musl-arm, Microsoft.NETCore.App.Runtime.linux-arm64, Microsoft.NETCore.App.Runtime.linux-arm
High
2 days ago

Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability GSA_kwCzR0hTQS1jNDk0LW0yZnEtNTlteM4ABiTk

nuget Microsoft.NETCore.App.Runtime.win-x64, Microsoft.NETCore.App.Runtime.win-arm64, Microsoft.NETCore.App.Runtime.win-x86
Moderate
13 days ago

ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow GSA_kwCzR0hTQS1wanhqLXBjaHgtNGMzbc4ABg-3

nuget Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion GSA_kwCzR0hTQS00NjRjLTk3NGotOXhtNs4ABfq8

pypi, go, maven, nuget, npm aws-cdk.aws-codebuild, aws-cdk-lib, github.com/aws/aws-cdk-go/awscdk, software.amazon.awscdk:codebuild, Amazon.CDK.AWS.CodeBuild, @aws-cdk/aws-codebuild, github.com/aws/aws-cdk-go/awscdk/v2, software.amazon.awscdk:aws-cdk-lib, Amazon.CDK.Lib
Moderate
20 days ago

ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds GSA_kwCzR0hTQS1oMjJqLWY5eHcteGpqbc4ABfqv

nuget Magick.NET-Q8-x86, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago

ImageMagick: Heap Buffer Over-Write in fx operation GSA_kwCzR0hTQS00MjJyLThjOTcteGNnNM4ABfqu

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago

ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided GSA_kwCzR0hTQS1mNW03LWNxZ3ctOGhtN84ABfqt

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
20 days ago

Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator GSA_kwCzR0hTQS1qcXdoLTUyNmgtYzkyas4ABfqc

nuget Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
High
20 days ago

Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator GSA_kwCzR0hTQS03ZjNqLWo3amotcjN2cs4ABfqb

nuget Microsoft.OpenAPI.Kiota.Builder, Microsoft.OpenAPI.Kiota
High
20 days ago

Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator GSA_kwCzR0hTQS14ZzJoLTV4cjItMjlqd84ABfqa

nuget Microsoft.OpenAPI.Kiota.Builder, Microsoft.OpenAPI.Kiota
Low
20 days ago

ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title GSA_kwCzR0hTQS03NnE2LTJwNmgteGpxcs4ABfps

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
20 days ago

Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection GSA_kwCzR0hTQS0zaHJmLTJnYzItbXgzMs4ABfpr

nuget Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
Low
20 days ago

ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified GSA_kwCzR0hTQS1oNXI0LXc4OHctN2Njcs4ABfpp

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Memory Leak in ICON decoder when allocation fails GSA_kwCzR0hTQS1oNTh4LXI3Zjctcmg4NM4ABfpo

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Memory leak in VIFF encoder when allocation fails GSA_kwCzR0hTQS1tNTk2LTY3cDctNjl3aM4ABfpn

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Memory Leak in MIFF encoder when allocaton fails GSA_kwCzR0hTQS1yNjI4LTY5djItMmY5Y84ABfpm

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Memory Leak in YUV decoder when opening of blob fails GSA_kwCzR0hTQS1oN2YyLWY5Y2MtaDJnds4ABfpl

nuget Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Memory Leak in TIFF encoder when an allocation fails GSA_kwCzR0hTQS1qZnE5LXE2M3gtcmM2M84ABfpk

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Memory Leak in JNG encoder when a blob could not be opened GSA_kwCzR0hTQS05OXc5LWh2NjYtcmZ2N84ABfpj

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Memory Leak in hough lines operation when an operation fails GSA_kwCzR0hTQS1qOHJoLXYycjgtdjk0eM4ABfpi

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Memory Leak in color transformation to log colorspace when operation fails GSA_kwCzR0hTQS03YzdtLWZwanctZ3djcc4ABfph

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created. GSA_kwCzR0hTQS02dnhwLWdmd2YtaGNyOc4ABfpg

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Information Disclosure when printing profiles with debug enabled GSA_kwCzR0hTQS1od2YzLXI0NnYtNWdneM4ABfpf

nuget Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails GSA_kwCzR0hTQS1xdnhoLXBydnItODV3Ms4ABfpe

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Use-After-Free when freetype initialization fails GSA_kwCzR0hTQS02andnLTdxM3AtNWZxbc4ABfpd

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Policy Bypass in script operation due to missing checks GSA_kwCzR0hTQS12Z2hnLTVqcmctMjM5OM4ABfpc

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check GSA_kwCzR0hTQS12M2o2LTI3dmMtN3B3Ms4ABfpb

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Heap-use-after-free via XMP profile could result in a crash GSA_kwCzR0hTQS1xaDVnLXEzOTUtY3g0as4ABfpa

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago

ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797 GSA_kwCzR0hTQS1oYzc2LTdtcGMtcWpxaM4ABfpZ

nuget Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago

ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219 GSA_kwCzR0hTQS01Nm02LThxNzUtZjJyd84ABfpY

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago

ImageMagick: Policy Bypass possible with matrix-backed operations GSA_kwCzR0hTQS1ydmhwLTc1ZjYtOWpxaM4ABfpX

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago

ImageMagick: Policy Bypass in concatenate operation due to missing checks GSA_kwCzR0hTQS04Mm1wLXZwNWMtOXBmN84ABfpU

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago

ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments GSA_kwCzR0hTQS1jNHY3LXc4OGctbTZjNM4ABfpT

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago

ImageMagick: Infinite Loop in connected-components when providing invalid arguments GSA_kwCzR0hTQS1xaG1mLTdmYzQtOHEzaM4ABfpS

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago

ImageMagick: Stack Overflow in MVG decoder due to missing depth check. GSA_kwCzR0hTQS1teDQ4LTJxcTMtMjNoZs4ABfpR

nuget Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago

ImageMagick: Use-After-Free in crafted 8BIM when identifying an image GSA_kwCzR0hTQS1mZjVjLTh4OXItOHFjd84ABfpP

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
21 days ago

ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged GSA_kwCzR0hTQS04ZzUzLTltM2MtNjl4Z84ABfnU

nuget Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
23 days ago

Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability GSA_kwCzR0hTQS1qOGdyLThmcDMtNXE1aM4ABcVy

nuget Microsoft.AspNetCore.App.Runtime.win-x86, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-arm, Microsoft.AspNetCore.App.Runtime.osx-x64, Microsoft.AspNetCore.App.Runtime.osx-arm64, Microsoft.AspNetCore.App.Runtime.linux-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm, Microsoft.AspNetCore.App.Runtime.linux-arm64, Microsoft.AspNetCore.App.Runtime.linux-arm
High
23 days ago

Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability GSA_kwCzR0hTQS0yOTY5LTRxNHctdzVoM84ABcVt

nuget Microsoft.WindowsDesktop.App.Runtime.win-arm64, Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64
High
24 days ago

Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability GSA_kwCzR0hTQS13cDc0LWpneGgtZ3Y0cc4ABcRU

nuget Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm
Moderate
24 days ago

Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability GSA_kwCzR0hTQS03NGpwLXZtMjItOHE4eM4ABcRT

nuget Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm
High
24 days ago

Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability GSA_kwCzR0hTQS1xdnc3LWptNWMtNmhxd84ABcRR

nuget Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm, Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm
High
24 days ago

Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability GSA_kwCzR0hTQS13N2N3LXhwN2gtNmo1as4ABcRP

nuget Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm
High
24 days ago

Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability GSA_kwCzR0hTQS1jdnZoLXJocmMtd2c0cc4ABcRN

nuget Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm, System.Security.Cryptography.Xml
High
24 days ago

Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability GSA_kwCzR0hTQS1ycDJwLTZjbXAtanhqOc4ABcRM

nuget Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm
High
27 days ago

Prompty: Arbitrary file read via file reference expansion GSA_kwCzR0hTQS13eGhtLTJtcTctNzY5N84ABbHs

nuget, cargo, npm, pypi Prompty.Core, prompty, @prompty/core
Moderate
about 1 month ago

Steeltoe's static JWKS cache shared across schemes and never invalidated GSA_kwCzR0hTQS03ZnFjLXAyNTYtN3B3as4ABaF6

nuget Steeltoe.Security.Authentication.CloudFoundryBase, Steeltoe.Security.Authentication.OpenIdConnect, Steeltoe.Security.Authentication.JwtBearer
Moderate
about 1 month ago

Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission GSA_kwCzR0hTQS0yMjdyLWptMmctN2NwNM4ABaF5

nuget Steeltoe.Management.EndpointBase, Steeltoe.Management.Endpoint
High
about 1 month ago

Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords GSA_kwCzR0hTQS1xNjJoLTM1NGctNXI4Nc4ABaF4

nuget Steeltoe.Management.EndpointCore, Steeltoe.Management.Endpoint
High
about 1 month ago

Steeltoe vulnerable to management-port isolation bypass via spoofed Host header GSA_kwCzR0hTQS01OGY2LTZyajItM3Y4cs4ABaF2

nuget Steeltoe.Management.EndpointCore, Steeltoe.Management.Endpoint
Moderate
about 2 months ago

ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image GSA_kwCzR0hTQS00NGNwLWMzd3ctOXJ2Nc4ABZpS

nuget Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago

ImageMagick: Memory Leak in wand option parser when providing invalid arguments GSA_kwCzR0hTQS1qOTg5LWY4OTItMjMzNc4ABZpR

nuget Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago

ImageMagick has Null Pointer Dereference caused by the distort operation when passing incorrect arguments GSA_kwCzR0hTQS1wOXJxLXE0NmMtZzR4Ns4ABZmx

nuget Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago

ImageMagick has a Use-After-Free when allocation in CheckPrimitiveExtent fails GSA_kwCzR0hTQS1weDdxLWdncWotaGNmMs4ABZmo

nuget Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
about 2 months ago

ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop GSA_kwCzR0hTQS1nMjJxLWY3Z2MtNWpocs4ABZiS

nuget Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
about 2 months ago

ImageMagick: Policy Bypass can Trigger an Out-of-Memory condition GSA_kwCzR0hTQS1xNjJjLWg3NXItMnhoY84ABZiR

nuget Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago

ImageMagick: Policy Bypass can read disallowed files via symlink GSA_kwCzR0hTQS14Y2ptLXdxZmYtbTY2Oc4ABZiQ

nuget Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
about 2 months ago

ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions GSA_kwCzR0hTQS04cGo5LTY4OTctNzR4Y84ABZiP

nuget Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago

ImageMagick has a Heap Buffer Over-Write in MAT decoder on 32-bit systems GSA_kwCzR0hTQS00djg5LTZtZ3EtNnJnY84ABZiO

nuget Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago

ImageMagick Vulnerable to Stack Overflow in its MVG Decoder GSA_kwCzR0hTQS1oMzZjLTM2NjYtaDQ4Oc4ABZiN

nuget Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago

ImageMagick has an Infinite Loop in subimage-search with crafted image GSA_kwCzR0hTQS01djYyLThmcTYtY3A5bc4ABZiM

nuget Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago

ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method GSA_kwCzR0hTQS0yaGhxLWM5OXgtNDkycs4ABZiL

nuget Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU

Filter by Severity

Filter by Package

Microsoft.ChakraCore 247 Magick.NET-Q16-AnyCPU 162 Magick.NET-Q16-HDRI-AnyCPU 162 Magick.NET-Q16-HDRI-OpenMP-arm64 157 Magick.NET-Q16-HDRI-x64 154 Magick.NET-Q16-HDRI-x86 153 Magick.NET-Q16-HDRI-arm64 149 Magick.NET-Q16-OpenMP-arm64 147 Magick.NET-Q16-OpenMP-x64 145 Magick.NET-Q16-arm64 143 Magick.NET-Q16-x86 142 Magick.NET-Q8-AnyCPU 141 Magick.NET-Q16-x64 138 Magick.NET-Q8-arm64 135 Magick.NET-Q8-OpenMP-arm64 135 Magick.NET-Q8-x86 134 Magick.NET-Q8-OpenMP-x64 133 Magick.NET-Q8-x64 125 Magick.NET-Q16-HDRI-OpenMP-x64 88 Magick.NET-Q16-OpenMP-x86 61 DotNetNuke.Core 36 Microsoft.NetCore.App.Runtime.win-arm64 25 Microsoft.NetCore.App.Runtime.win-arm 25 Microsoft.NetCore.App.Runtime.win-x64 24 Microsoft.NetCore.App.Runtime.win-x86 24 Microsoft.AspNetCore.App.Runtime.win-x64 23 Microsoft.AspNetCore.App.Runtime.win-x86 22 Microsoft.NetCore.App.Runtime.linux-musl-arm64 21 Microsoft.NetCore.App.Runtime.linux-arm64 21 Microsoft.NetCore.App.Runtime.linux-musl-arm 21 Microsoft.AspNetCore.App.Runtime.linux-arm64 21 Microsoft.NetCore.App.Runtime.linux-x64 21 Microsoft.NetCore.App.Runtime.linux-musl-x64 21 Microsoft.NetCore.App.Runtime.linux-arm 21 Microsoft.AspNetCore.App.Runtime.linux-x64 20 Microsoft.NetCore.App.Runtime.osx-arm64 20 Microsoft.AspNetCore.App.Runtime.win-arm 20 Microsoft.AspNetCore.App.Runtime.linux-arm 20 Microsoft.NetCore.App.Runtime.osx-x64 20 Microsoft.AspNetCore.App.Runtime.osx-x64 19 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 19 Microsoft.AspNetCore.App.Runtime.win-arm64 19 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 18 Microsoft.AspNetCore.App.Runtime.linux-musl-arm 16 TinyMCE 15 tinymce 15 tinymce/tinymce 15 Umbraco.Cms 15 MessagePack 14 Umbraco.CMS 13 Microsoft.NETCore.App.Runtime.linux-musl-arm64 12 Microsoft.NETCore.App.Runtime.win-arm64 12 Microsoft.NETCore.App.Runtime.win-x64 12 Microsoft.NETCore.App.Runtime.linux-arm64 12 Microsoft.NETCore.App.Runtime.linux-x64 12 Microsoft.NETCore.App.Runtime.linux-arm 12 Microsoft.AspNetCore.App.Runtime.osx-arm64 12 Microsoft.WindowsDesktop.App.Runtime.win-arm64 11 OPCFoundation.NetStandard.Opc.Ua.Core 11 System.Security.Cryptography.Xml 11 Microsoft.WindowsDesktop.App.Runtime.win-x64 11 Microsoft.NETCore.App.Runtime.linux-musl-x64 10 Microsoft.NETCore.App 10 Microsoft.NETCore.App.Runtime.win-x86 10 Microsoft.WindowsDesktop.App.Runtime.win-x86 10 Microsoft.NETCore.App.Runtime.osx-x64 9 Scriban 8 Piranha 8 CefSharp.Common 8 Microsoft.NETCore.App.Runtime.linux-musl-arm 8 Microsoft.OpenApi.Kiota 8 CoreWCF.Primitives 8 Microsoft.AspNetCore.All 8 org.webjars.npm:jquery-ui 7 jQuery.UI.Combined 7 Microsoft.OpenApi.Kiota.Builder 7 Microsoft.AspNetCore.App 7 scriban 7 SixLabors.ImageSharp 7 jquery-ui 7 Microsoft.AspNetCore.Server.Kestrel.Core 6 jQuery 6 CefSharp.Wpf.HwndHost 6 CefSharp.Wpf 6 OPCFoundation.NetStandard.Opc.Ua 6 CefSharp.WinForms 6 Microsoft.NETCore.App.Runtime.win-arm 6 jquery 5 Umbraco.Forms 5 UmbracoCms 5 DNN.PLATFORM 5 Snowflake.Data 4 NuGet.Commands 4 Microsoft.AspNetCore.Mvc 4 bootstrap 4 Microsoft.AspNetCore.Mvc.Core 4 Microsoft.NETCore.App.Runtime.osx-arm64 4 Microsoft.NETCore.App.Runtime.rhel.6-x64 4 Microsoft.Native.Quic.MsQuic.OpenSSL 4 DotVVM 4 SharpZipLib 4 Serenity.Net.Core 4 SSCMS 4 NuGet.CommandLine 4 Microsoft.Native.Quic.MsQuic.Schannel 4 UmbracoForms 4 NuGet.Protocol 3 Azure.Identity 3 Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 3 Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 3 bootstrap-sass 3 Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 3 Nerdbank.MessagePack 3 Oqtane.Server 3 BouncyCastle.Cryptography 3 wix 3 YAFNET.Core 3 Oqtane.Framework 3 Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 3 UmbracoCms.Core 3 Microsoft.AspNetCore.Identity 3 org.webjars.npm:jquery 3 BouncyCastle 3 Sustainsys.Saml2 3 Umbraco.Cms.Web.BackOffice 3 System.Text.Encodings.Web 3 OpenTelemetry.Exporter.OpenTelemetryProtocol 3 OPCFoundation.NetStandard.Opc.Ua.Server 3 log4net 3 Umbraco.Cms.Core 3 bootstrap 3 Steeltoe.Management.Endpoint 3 AjaxNetProfessional 3 bootstrap-sass 3 jquery-rails 3 CefSharp.Common.NETCore 3 bootstrap 3 jquery-ui-rails 3 SIPSorcery 3 System.Private.Uri 3 Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 3 Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 3 System.Net.Http 3 HtmlSanitizer 3 Microsoft.NETCore.App.Runtime.Mono.linux-arm 2 Microsoft.NET.Build.Containers 2 org.bouncycastle:bcprov-jdk15to18 2 OpenTelemetry.Api 2 Microsoft.AspNetCore.Mvc.Abstractions 2 NuGet.Packaging 2 System.Net.WebSockets.Client 2 OrchardCore 2 Yarp.ReverseProxy 2 Duende.IdentityServer 2 Microsoft.OpenAPI.Kiota 2 net.sf.mpxj:mpxj 2 MimeKit 2 System.Net.Http.WinHttpHandler 2 Microsoft.NETCore.App.Runtime.Mono.osx-x64 2 FormCMS 2 Microsoft.AspNetCore.Http.Connections 2 ServiceStack 2 UmbracoCMS.Core 2 Microsoft.AspNetCore.Mvc.Cors 2 RestSharp 2 Umbraco.Cms.StaticAssets 2 SSH.NET 2 CoreWCF.UnixDomainSocket 2 net.sf.mpxj-for-vb 2 PanelSW.Custom.WiX 2 net.sf.mpxj 2 Csla 2 @umbraco-cms/backoffice 2 twbs/bootstrap 2 sharpcompress 2 org.bouncycastle:bctls-jdk18on 2 System.Linq.Dynamic.Core 2 org.bouncycastle:bcprov-jdk18on 2 net.sf.mpxj-for-csharp 2 PanelSwWix4.Sdk 2 System.Security.Cryptography.Cose 2 PeterO.Cbor 2 DotNetNuke.Web 2 OpenMcdf 2 org.bouncycastle:bcprov-jdk15on 2 System.Formats.Nrbf 2 org.bouncycastle:bcprov-jdk14 2 System.IO.Packaging 2 Microsoft.AspNetCore.Authentication.Negotiate 2 Microsoft.NETCore.App.Runtime.Mono.linux-x64 2 Steeltoe.Discovery.Eureka 2 Microsoft.Build.Tasks.Core 2 Bootstrap.Less 2 System.Data.SqlClient 2 Microsoft.Data.SqlClient 2 Microsoft.NETCore.App.Runtime.Mono.linux-arm64 2 moment 2 CoreWCF.NetFramingBase 2 Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 2 Microsoft.OpenAPI.Kiota.Builder 2

Filter by Repository

https://github.com/chakra-core/ChakraCore 214 https://github.com/dotnet/runtime 38 https://github.com/umbraco/Umbraco-CMS 35 https://github.com/dnnsoftware/Dnn.Platform 23 https://github.com/github/advisory-database 18 https://github.com/dotnet/aspnetcore 16 https://github.com/OPCFoundation/UA-.NETStandard 15 https://github.com/ImageMagick/ImageMagick 14 https://github.com/tinymce/tinymce 11 https://github.com/cefsharp/CefSharp 8 https://github.com/jquery/jquery 7 https://github.com/SixLabors/ImageSharp 7 https://github.com/PiranhaCMS/piranha.core 6 https://github.com/jquery/jquery-ui 6 https://github.com/snowflakedb/snowflake-connector-net 4 https://github.com/icsharpcode/SharpZipLib 4 https://github.com/NuGet/NuGet.Client 4 https://github.com/siteserver/cms 4 https://github.com/DuendeSoftware/IdentityServer 3 https://github.com/dotnet/wpf 3 https://github.com/Sustainsys/Saml2 3 https://github.com/umbraco/Umbraco.Forms.Issues 3 https://github.com/michaelschwarz/Ajax.NET-Professional 3 https://github.com/dotnet/sdk 3 https://github.com/oqtane/oqtane.framework 3 https://github.com/serenity-is/Serenity 3 https://github.com/twbs/bootstrap 3 https://github.com/bcgit/bc-csharp 3 https://github.com/PowerShell/PowerShell 3 https://github.com/wixtoolset/issues 3 https://github.com/Azure/azure-sdk-for-net 3 https://github.com/microsoft/msquic 3 https://github.com/mongodb/mongo-csharp-driver 2 https://github.com/reactiveui/refit 2 https://github.com/Aiko-IT-Systems/DisCatSharp 2 https://github.com/restsharp/RestSharp 2 https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet 2 https://github.com/Pryaxis/TShock 2 https://github.com/akkadotnet/akka.net 2 https://github.com/zzzprojects/System.Linq.Dynamic.Core 2 https://github.com/gordon-matt/elFinder.NetCore 2 https://github.com/ServiceStack/ServiceStack 2 https://github.com/adamhathcock/sharpcompress 2 https://github.com/nirbar/wix4 2 https://github.com/tgstation/tgstation-server 2 https://github.com/peteroupc/CBOR 2 https://github.com/Microsoft/ChakraCore 2 https://github.com/moment/moment 2 https://github.com/mganss/HtmlSanitizer 2 https://github.com/nirbar/wix3 2 https://github.com/dotnet/msbuild 2 https://github.com/open-telemetry/opentelemetry-dotnet 2 https://github.com/joniles/mpxj 2 https://github.com/orchardcms/orchardcore 2 https://github.com/theori-io/chakra-2016-11 2 https://github.com/microsoft/reverse-proxy 2 https://github.com/amazon-ion/ion-dotnet 2 https://github.com/haf/DotNetZip.Semverd 2 https://github.com/FormCms/FormCms 2 https://github.com/dotnet/corefx 2 https://github.com/Orckestra/C1-CMS-Foundation 2 https://github.com/SeriaWei/ZKEACMS 1 https://github.com/CoreWCF/CoreWCF 1 https://github.com/italia/cie-aspnetcore 1 https://github.com/dnnsoftware/dnn.platform 1 https://github.com/DuendeSoftware/Duende.AccessTokenManagement 1 https://github.com/microsoft/DirectXTex 1 https://github.com/IowaComputerGurus/aspnetcore.utilities.cloudstorage 1 https://github.com/Jasig/phpCAS 1 https://github.com/AsynkronIT/Wire 1 https://github.com/kubernetes/kubernetes 1 https://github.com/adplug/adplug 1 https://github.com/elastic/apm-agent-dotnet 1 https://github.com/MessagePack-CSharp/MessagePack-CSharp 1 https://github.com/dotnet/diagnostics 1 https://github.com/trannamtrung1st/elFinder.Net.Core 1 https://github.com/imazen/imageflow 1 https://github.com/starkbank/ecdsa-python 1 https://github.com/umbraco/Umbraco.Commerce.Issues 1 https://github.com/jstedfast/MimeKit 1 https://github.com/ravibpatel/AutoUpdater.NET 1 https://github.com/couchbase/couchbase-net-client 1 https://github.com/italia/spid-aspnetcore 1 https://github.com/umbraco/Umbraco.Workflow.Issues 1 https://github.com/Bluegrams/YoutubeDLSharp 1 https://github.com/TrueLayer/truelayer-dotnet 1 https://github.com/neuecc/MessagePack-CSharp 1 https://github.com/Brondahl/EnumStringValues 1 https://github.com/microsoft/bond 1 https://github.com/riganti/dotvvm 1 https://github.com/open-telemetry/opentelemetry-dotnet-instrumentation 1 https://github.com/mguinness/elFinder.AspNet 1 https://github.com/AzureAD/microsoft-authentication-library-for-dotnet 1 https://github.com/QuantConnect/Lean 1 https://github.com/pentesttoolscom/vulnerability-research 1 https://github.com/microsoft/ChakraCore 1 https://github.com/madskristensen/Miniblog.Core 1 https://github.com/drewnoakes/metadata-extractor-dotnet 1 https://github.com/apache/lucenenet 1 https://github.com/microsoft/botbuilder-dotnet 1 https://github.com/imazen/resizer 1 https://github.com/PowerShell/Announcements 1 https://github.com/jonschlinkert/set-value 1 https://gitlab.com/eLeN3Re/cve-2020-9472 1 https://github.com/glennrp/libpng 1 https://github.com/OPCFoundation/UA-.NET-Legacy 1 https://github.com/spassarop/antisamy-dotnet 1 https://github.com/Azure/azure-sdk-for-go 1 https://github.com/aaubry/YamlDotNet 1 https://github.com/moq/moq 1 https://github.com/apache/avro 1 https://github.com/NancyFx/Nancy 1 https://github.com/blogifierdotnet/Blogifier 1 https://github.com/mwilliamson/mammoth.js 1 https://github.com/dotnetcore/AgileConfig 1 https://github.com/Archomeda/Gw2Sharp 1 https://github.com/npgsql/npgsql 1 https://github.com/google/protobuf 1 https://github.com/AzureAD/microsoft-identity-web 1 https://github.com/Antaris/RazorEngine 1 https://github.com/LittleBigRefresh/Bunkum 1 https://gitlab.com/eLeN3Re/cve-2020-9471 1 https://github.com/DuendeSoftware/foss 1 https://github.com/git-ecosystem/git-credential-manager 1 https://github.com/snapappointments/bootstrap-select 1 https://github.com/ldqk/Masuit.Tools 1 https://github.com/MichaelGrafnetter/DSInternals 1 https://github.com/dub-flow/vulnerability-research 1 https://github.com/turquoiseowl/i18n 1 https://github.com/JamesNK/Newtonsoft.Json 1 https://github.com/gsemac/Gsemac.Common 1 https://github.com/jellyfin/jellyfin-web 1 https://github.com/recurly/recurly-client-net 1 https://github.com/sshnet/NET 1 https://github.com/serilog-contrib/serilog-enrichers-clientinfo 1 https://github.com/jellyfin/jellyfin 1 https://github.com/Shazwazza/Smidge 1 https://github.com/SeppPenner/WindowsHello 1 https://github.com/mbdavid/LiteDB 1 https://github.com/jchristn/IpMatcher 1 https://github.com/personnummer/csharp 1 https://github.com/google/brotli 1 https://github.com/kapetan/dns 1 https://github.com/SinGooCMS/SinGooCMSUtility 1 https://github.com/NuGet/Home 1 https://github.com/brantburnett/Snappier 1 https://github.com/OrchardCMS/OrchardCore 1 https://github.com/FastReports/FastReport 1 https://github.com/jquery-validation/jquery-validation 1 https://github.com/nhibernate/nhibernate-core 1 https://github.com/Devolutions/XTS.NET 1 https://github.com/apache/logging-log4net 1 https://github.com/starkbank/ecdsa-dotnet 1 https://github.com/HangfireIO/Hangfire 1 https://github.com/MarimerLLC/csla 1 https://github.com/apache/activemq-nms-openwire 1 https://github.com/SteeltoeOSS/security-advisories 1