nuget
Security Advisories in nuget
High
about 24 hours ago
SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)
nuget
SIPSorcery
High
about 24 hours ago
SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing
nuget
SIPSorcery
High
1 day ago
SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames
nuget
SSH.NET
Moderate
2 days ago
Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability
nuget
Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
2 days ago
Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability
nuget
Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
2 days ago
Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability
nuget
Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
2 days ago
Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability
nuget
Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
Moderate
2 days ago
Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
nuget
Microsoft.NETCore.App.Runtime.osx-x64, Microsoft.NETCore.App.Runtime.osx-arm64, Microsoft.NETCore.App.Runtime.linux-x64, Microsoft.NETCore.App.Runtime.linux-musl-x64, Microsoft.NETCore.App.Runtime.linux-musl-arm64, Microsoft.NETCore.App.Runtime.linux-musl-arm, Microsoft.NETCore.App.Runtime.linux-arm64, Microsoft.NETCore.App.Runtime.linux-arm
High
2 days ago
Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability
nuget
Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
2 days ago
Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability
nuget
Microsoft.NETCore.App.Runtime.osx-x64, Microsoft.NETCore.App.Runtime.osx-arm64, Microsoft.NETCore.App.Runtime.linux-x64, Microsoft.NETCore.App.Runtime.linux-musl-x64, Microsoft.NETCore.App.Runtime.linux-musl-arm64, Microsoft.NETCore.App.Runtime.linux-musl-arm, Microsoft.NETCore.App.Runtime.linux-arm64, Microsoft.NETCore.App.Runtime.linux-arm, Microsoft.NETCore.App.Runtime.win-x86, Microsoft.NETCore.App.Runtime.win-x64, Microsoft.NETCore.App.Runtime.win-arm64
Moderate
2 days ago
Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability
nuget
Microsoft.NETCore.App.Runtime.osx-x64, Microsoft.NETCore.App.Runtime.osx-arm64, Microsoft.NETCore.App.Runtime.linux-x64, Microsoft.NETCore.App.Runtime.linux-musl-x64, Microsoft.NETCore.App.Runtime.linux-musl-arm64, Microsoft.NETCore.App.Runtime.linux-musl-arm, Microsoft.NETCore.App.Runtime.linux-arm64, Microsoft.NETCore.App.Runtime.linux-arm
High
2 days ago
Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability
nuget
Microsoft.NETCore.App.Runtime.win-x64, Microsoft.NETCore.App.Runtime.win-arm64, Microsoft.NETCore.App.Runtime.win-x86
Moderate
13 days ago
ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow
nuget
Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
16 days ago
Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability
nuget
System.Security.Cryptography.Xml
High
16 days ago
SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)
nuget
SIPSorcery
Low
20 days ago
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
pypi, go, maven, nuget, npm
aws-cdk.aws-codebuild, aws-cdk-lib, github.com/aws/aws-cdk-go/awscdk, software.amazon.awscdk:codebuild, Amazon.CDK.AWS.CodeBuild, @aws-cdk/aws-codebuild, github.com/aws/aws-cdk-go/awscdk/v2, software.amazon.awscdk:aws-cdk-lib, Amazon.CDK.Lib
Moderate
20 days ago
ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago
ImageMagick: Heap Buffer Over-Write in fx operation
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago
ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago
Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)
nuget
Microsoft.OpenApi.Kiota
High
20 days ago
Microsoft Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName
nuget
Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
Critical
20 days ago
Microsoft Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info`
nuget
Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
High
20 days ago
Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF
nuget
Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
High
20 days ago
Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref
nuget
Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
Critical
20 days ago
Microsoft Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions
nuget
Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
High
20 days ago
Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator
nuget
Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
High
20 days ago
Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator
nuget
Microsoft.OpenAPI.Kiota.Builder, Microsoft.OpenAPI.Kiota
High
20 days ago
Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator
nuget
Microsoft.OpenAPI.Kiota.Builder, Microsoft.OpenAPI.Kiota
Low
20 days ago
ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
20 days ago
Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection
nuget
Microsoft.OpenApi.Kiota.Builder, Microsoft.OpenApi.Kiota
Low
20 days ago
ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Memory Leak in ICON decoder when allocation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Memory leak in VIFF encoder when allocation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Memory Leak in MIFF encoder when allocaton fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Memory Leak in YUV decoder when opening of blob fails
nuget
Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Memory Leak in TIFF encoder when an allocation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Memory Leak in JNG encoder when a blob could not be opened
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Memory Leak in hough lines operation when an operation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Memory Leak in color transformation to log colorspace when operation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Information Disclosure when printing profiles with debug enabled
nuget
Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Use-After-Free when freetype initialization fails
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Policy Bypass in script operation due to missing checks
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Heap-use-after-free via XMP profile could result in a crash
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago
ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
nuget
Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago
ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Low
20 days ago
ImageMagick: Policy Bypass possible with matrix-backed operations
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago
ImageMagick: Policy Bypass in concatenate operation due to missing checks
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago
ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago
ImageMagick: Infinite Loop in connected-components when providing invalid arguments
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago
ImageMagick: Stack Overflow in MVG decoder due to missing depth check.
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
20 days ago
ImageMagick: Use-After-Free in crafted 8BIM when identifying an image
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
21 days ago
ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
23 days ago
Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability
nuget
Microsoft.AspNetCore.App.Runtime.win-x86, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-arm, Microsoft.AspNetCore.App.Runtime.osx-x64, Microsoft.AspNetCore.App.Runtime.osx-arm64, Microsoft.AspNetCore.App.Runtime.linux-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm, Microsoft.AspNetCore.App.Runtime.linux-arm64, Microsoft.AspNetCore.App.Runtime.linux-arm
High
23 days ago
Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability
nuget
Microsoft.NET.Build.Containers
High
23 days ago
Microsoft Security Advisory CVE-2026-47300 – .NET Elevation of Privilege Vulnerability
nuget
Microsoft.AspNetCore.Authentication.Negotiate
High
23 days ago
Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability
nuget
Microsoft.AspNetCore.Authentication.Negotiate
High
23 days ago
Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability
nuget
System.Security.Cryptography.Xml
High
23 days ago
Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability
nuget
Microsoft.WindowsDesktop.App.Runtime.win-arm64, Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64
High
24 days ago
Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability
nuget
Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm
Moderate
24 days ago
Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability
nuget
Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm
High
24 days ago
Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability
nuget
System.Security.Cryptography.Xml
High
24 days ago
Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability
nuget
Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm, Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm
High
24 days ago
Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability
nuget
System.Security.Cryptography.Xml
High
24 days ago
Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability
nuget
Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm
High
24 days ago
Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability
nuget
System.Security.Cryptography.Xml
High
24 days ago
Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability
nuget
Microsoft.NetCore.App.Runtime.win-x86, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm, System.Security.Cryptography.Xml
High
24 days ago
Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability
nuget
Microsoft.NetCore.App.Runtime.osx-x64, Microsoft.NetCore.App.Runtime.osx-arm64, Microsoft.NetCore.App.Runtime.linux-x64, Microsoft.NetCore.App.Runtime.linux-musl-x64, Microsoft.NetCore.App.Runtime.linux-musl-arm64, Microsoft.NetCore.App.Runtime.linux-musl-arm, Microsoft.NetCore.App.Runtime.linux-arm64, Microsoft.NetCore.App.Runtime.linux-arm
Moderate
27 days ago
AngleSharp HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass
nuget
AngleSharp
High
27 days ago
Prompty: Arbitrary file read via file reference expansion
nuget, cargo, npm, pypi
Prompty.Core, prompty, @prompty/core
High
29 days ago
dd-trace-dotnet: Improper parsing of W3C baggage headers may lead to DoS
nuget
Datadog.Trace.OpenTracing, Datadog.Trace
Moderate
30 days ago
Umbraco.AI discloses sensitive application configuration values
nuget
Umbraco.AI
High
about 1 month ago
Scriban: Template Writes to Arbitrary CLR Properties via `TypedObjectAccessor` (Mass Assignment + `private` / `init` / `internal` Setter Bypass)
nuget
Scriban
Low
about 1 month ago
Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding
nuget
Steeltoe.Configuration.Encryption
Moderate
about 1 month ago
Steeltoe: TLS private keys written to /tmp with default permissions, never deleted
nuget
Steeltoe.Configuration.Abstractions
Moderate
about 1 month ago
Steeltoe's static JWKS cache shared across schemes and never invalidated
nuget
Steeltoe.Security.Authentication.CloudFoundryBase, Steeltoe.Security.Authentication.OpenIdConnect, Steeltoe.Security.Authentication.JwtBearer
Moderate
about 1 month ago
Steeltoe's sensitive actuators (heapdump/env) only require Restricted permission
nuget
Steeltoe.Management.EndpointBase, Steeltoe.Management.Endpoint
High
about 1 month ago
Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords
nuget
Steeltoe.Management.EndpointCore, Steeltoe.Management.Endpoint
High
about 1 month ago
Steeltoe.Discovery.Eureka: Unrecognized DataCenterInfo.Name poisons entire registry fetch
nuget
Steeltoe.Discovery.Eureka
High
about 1 month ago
Steeltoe vulnerable to management-port isolation bypass via spoofed Host header
nuget
Steeltoe.Management.EndpointCore, Steeltoe.Management.Endpoint
Moderate
about 1 month ago
CefSharp.Common: `FolderSchemeHandlerFactory` path boundary check can expose files outside the configured root folder
nuget
CefSharp.Common
High
about 1 month ago
Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing
nuget
Microsoft.OpenAPI
Moderate
about 2 months ago
ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Memory Leak in wand option parser when providing invalid arguments
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
Scriban: ExpressionDepthLimit guard is non-enforcing — parser-recursion DoS in 6.6.0–7.2.0 (incomplete fix for GHSA-wgh7-7m3c-fx25 / GHSA-p6q4-fgr8-vx4p)
nuget
Scriban
Moderate
about 2 months ago
Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx
nuget
Scriban
Moderate
about 2 months ago
ImageMagick has Null Pointer Dereference caused by the distort operation when passing incorrect arguments
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick has a Use-After-Free when allocation in CheckPrimitiveExtent fails
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
about 2 months ago
ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
about 2 months ago
ImageMagick: Policy Bypass can Trigger an Out-of-Memory condition
nuget
Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick: Policy Bypass can read disallowed files via symlink
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
High
about 2 months ago
ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick has a Heap Buffer Over-Write in MAT decoder on 32-bit systems
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick Vulnerable to Stack Overflow in its MVG Decoder
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick has an Infinite Loop in subimage-search with crafted image
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method
nuget
Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-arm64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
about 2 months ago
MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic arguments
nuget
MessagePack
Moderate
about 2 months ago
MessagePack-CSharp: InterfaceLookupFormatter bypasses collision-resistant comparer settings
nuget
MessagePack
Filter by Severity
Filter by Package
Microsoft.ChakraCore
247
Magick.NET-Q16-AnyCPU
162
Magick.NET-Q16-HDRI-AnyCPU
162
Magick.NET-Q16-HDRI-OpenMP-arm64
157
Magick.NET-Q16-HDRI-x64
154
Magick.NET-Q16-HDRI-x86
153
Magick.NET-Q16-HDRI-arm64
149
Magick.NET-Q16-OpenMP-arm64
147
Magick.NET-Q16-OpenMP-x64
145
Magick.NET-Q16-arm64
143
Magick.NET-Q16-x86
142
Magick.NET-Q8-AnyCPU
141
Magick.NET-Q16-x64
138
Magick.NET-Q8-arm64
135
Magick.NET-Q8-OpenMP-arm64
135
Magick.NET-Q8-x86
134
Magick.NET-Q8-OpenMP-x64
133
Magick.NET-Q8-x64
125
Magick.NET-Q16-HDRI-OpenMP-x64
88
Magick.NET-Q16-OpenMP-x86
61
DotNetNuke.Core
36
Microsoft.NetCore.App.Runtime.win-arm64
25
Microsoft.NetCore.App.Runtime.win-arm
25
Microsoft.NetCore.App.Runtime.win-x64
24
Microsoft.NetCore.App.Runtime.win-x86
24
Microsoft.AspNetCore.App.Runtime.win-x64
23
Microsoft.AspNetCore.App.Runtime.win-x86
22
Microsoft.NetCore.App.Runtime.linux-musl-arm64
21
Microsoft.NetCore.App.Runtime.linux-arm64
21
Microsoft.NetCore.App.Runtime.linux-musl-arm
21
Microsoft.AspNetCore.App.Runtime.linux-arm64
21
Microsoft.NetCore.App.Runtime.linux-x64
21
Microsoft.NetCore.App.Runtime.linux-musl-x64
21
Microsoft.NetCore.App.Runtime.linux-arm
21
Microsoft.AspNetCore.App.Runtime.linux-x64
20
Microsoft.NetCore.App.Runtime.osx-arm64
20
Microsoft.AspNetCore.App.Runtime.win-arm
20
Microsoft.AspNetCore.App.Runtime.linux-arm
20
Microsoft.NetCore.App.Runtime.osx-x64
20
Microsoft.AspNetCore.App.Runtime.osx-x64
19
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
19
Microsoft.AspNetCore.App.Runtime.win-arm64
19
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
18
Microsoft.AspNetCore.App.Runtime.linux-musl-arm
16
TinyMCE
15
tinymce
15
tinymce/tinymce
15
Umbraco.Cms
15
MessagePack
14
Umbraco.CMS
13
Microsoft.NETCore.App.Runtime.linux-musl-arm64
12
Microsoft.NETCore.App.Runtime.win-arm64
12
Microsoft.NETCore.App.Runtime.win-x64
12
Microsoft.NETCore.App.Runtime.linux-arm64
12
Microsoft.NETCore.App.Runtime.linux-x64
12
Microsoft.NETCore.App.Runtime.linux-arm
12
Microsoft.AspNetCore.App.Runtime.osx-arm64
12
Microsoft.WindowsDesktop.App.Runtime.win-arm64
11
OPCFoundation.NetStandard.Opc.Ua.Core
11
System.Security.Cryptography.Xml
11
Microsoft.WindowsDesktop.App.Runtime.win-x64
11
Microsoft.NETCore.App.Runtime.linux-musl-x64
10
Microsoft.NETCore.App
10
Microsoft.NETCore.App.Runtime.win-x86
10
Microsoft.WindowsDesktop.App.Runtime.win-x86
10
Microsoft.NETCore.App.Runtime.osx-x64
9
Scriban
8
Piranha
8
CefSharp.Common
8
Microsoft.NETCore.App.Runtime.linux-musl-arm
8
Microsoft.OpenApi.Kiota
8
CoreWCF.Primitives
8
Microsoft.AspNetCore.All
8
org.webjars.npm:jquery-ui
7
jQuery.UI.Combined
7
Microsoft.OpenApi.Kiota.Builder
7
Microsoft.AspNetCore.App
7
scriban
7
SixLabors.ImageSharp
7
jquery-ui
7
Microsoft.AspNetCore.Server.Kestrel.Core
6
jQuery
6
CefSharp.Wpf.HwndHost
6
CefSharp.Wpf
6
OPCFoundation.NetStandard.Opc.Ua
6
CefSharp.WinForms
6
Microsoft.NETCore.App.Runtime.win-arm
6
jquery
5
Umbraco.Forms
5
UmbracoCms
5
DNN.PLATFORM
5
Snowflake.Data
4
NuGet.Commands
4
Microsoft.AspNetCore.Mvc
4
bootstrap
4
Microsoft.AspNetCore.Mvc.Core
4
Microsoft.NETCore.App.Runtime.osx-arm64
4
Microsoft.NETCore.App.Runtime.rhel.6-x64
4
Microsoft.Native.Quic.MsQuic.OpenSSL
4
DotVVM
4
SharpZipLib
4
Serenity.Net.Core
4
SSCMS
4
NuGet.CommandLine
4
Microsoft.Native.Quic.MsQuic.Schannel
4
UmbracoForms
4
NuGet.Protocol
3
Azure.Identity
3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64
3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64
3
bootstrap-sass
3
Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64
3
Nerdbank.MessagePack
3
Oqtane.Server
3
BouncyCastle.Cryptography
3
wix
3
YAFNET.Core
3
Oqtane.Framework
3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64
3
UmbracoCms.Core
3
Microsoft.AspNetCore.Identity
3
org.webjars.npm:jquery
3
BouncyCastle
3
Sustainsys.Saml2
3
Umbraco.Cms.Web.BackOffice
3
System.Text.Encodings.Web
3
OpenTelemetry.Exporter.OpenTelemetryProtocol
3
OPCFoundation.NetStandard.Opc.Ua.Server
3
log4net
3
Umbraco.Cms.Core
3
bootstrap
3
Steeltoe.Management.Endpoint
3
AjaxNetProfessional
3
bootstrap-sass
3
jquery-rails
3
CefSharp.Common.NETCore
3
bootstrap
3
jquery-ui-rails
3
SIPSorcery
3
System.Private.Uri
3
Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64
3
Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64
3
System.Net.Http
3
HtmlSanitizer
3
Microsoft.NETCore.App.Runtime.Mono.linux-arm
2
Microsoft.NET.Build.Containers
2
org.bouncycastle:bcprov-jdk15to18
2
OpenTelemetry.Api
2
Microsoft.AspNetCore.Mvc.Abstractions
2
NuGet.Packaging
2
System.Net.WebSockets.Client
2
OrchardCore
2
Yarp.ReverseProxy
2
Duende.IdentityServer
2
Microsoft.OpenAPI.Kiota
2
net.sf.mpxj:mpxj
2
MimeKit
2
System.Net.Http.WinHttpHandler
2
Microsoft.NETCore.App.Runtime.Mono.osx-x64
2
FormCMS
2
Microsoft.AspNetCore.Http.Connections
2
ServiceStack
2
UmbracoCMS.Core
2
Microsoft.AspNetCore.Mvc.Cors
2
RestSharp
2
Umbraco.Cms.StaticAssets
2
SSH.NET
2
CoreWCF.UnixDomainSocket
2
net.sf.mpxj-for-vb
2
PanelSW.Custom.WiX
2
net.sf.mpxj
2
Csla
2
@umbraco-cms/backoffice
2
twbs/bootstrap
2
sharpcompress
2
org.bouncycastle:bctls-jdk18on
2
System.Linq.Dynamic.Core
2
org.bouncycastle:bcprov-jdk18on
2
net.sf.mpxj-for-csharp
2
PanelSwWix4.Sdk
2
System.Security.Cryptography.Cose
2
PeterO.Cbor
2
DotNetNuke.Web
2
OpenMcdf
2
org.bouncycastle:bcprov-jdk15on
2
System.Formats.Nrbf
2
org.bouncycastle:bcprov-jdk14
2
System.IO.Packaging
2
Microsoft.AspNetCore.Authentication.Negotiate
2
Microsoft.NETCore.App.Runtime.Mono.linux-x64
2
Steeltoe.Discovery.Eureka
2
Microsoft.Build.Tasks.Core
2
Bootstrap.Less
2
System.Data.SqlClient
2
Microsoft.Data.SqlClient
2
Microsoft.NETCore.App.Runtime.Mono.linux-arm64
2
moment
2
CoreWCF.NetFramingBase
2
Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64
2
Microsoft.OpenAPI.Kiota.Builder
2
Filter by Repository
https://github.com/chakra-core/ChakraCore
214
https://github.com/dotnet/runtime
38
https://github.com/umbraco/Umbraco-CMS
35
https://github.com/dnnsoftware/Dnn.Platform
23
https://github.com/github/advisory-database
18
https://github.com/dotnet/aspnetcore
16
https://github.com/OPCFoundation/UA-.NETStandard
15
https://github.com/ImageMagick/ImageMagick
14
https://github.com/tinymce/tinymce
11
https://github.com/cefsharp/CefSharp
8
https://github.com/jquery/jquery
7
https://github.com/SixLabors/ImageSharp
7
https://github.com/PiranhaCMS/piranha.core
6
https://github.com/jquery/jquery-ui
6
https://github.com/snowflakedb/snowflake-connector-net
4
https://github.com/icsharpcode/SharpZipLib
4
https://github.com/NuGet/NuGet.Client
4
https://github.com/siteserver/cms
4
https://github.com/DuendeSoftware/IdentityServer
3
https://github.com/dotnet/wpf
3
https://github.com/Sustainsys/Saml2
3
https://github.com/umbraco/Umbraco.Forms.Issues
3
https://github.com/michaelschwarz/Ajax.NET-Professional
3
https://github.com/dotnet/sdk
3
https://github.com/oqtane/oqtane.framework
3
https://github.com/serenity-is/Serenity
3
https://github.com/twbs/bootstrap
3
https://github.com/bcgit/bc-csharp
3
https://github.com/PowerShell/PowerShell
3
https://github.com/wixtoolset/issues
3
https://github.com/Azure/azure-sdk-for-net
3
https://github.com/microsoft/msquic
3
https://github.com/mongodb/mongo-csharp-driver
2
https://github.com/reactiveui/refit
2
https://github.com/Aiko-IT-Systems/DisCatSharp
2
https://github.com/restsharp/RestSharp
2
https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet
2
https://github.com/Pryaxis/TShock
2
https://github.com/akkadotnet/akka.net
2
https://github.com/zzzprojects/System.Linq.Dynamic.Core
2
https://github.com/gordon-matt/elFinder.NetCore
2
https://github.com/ServiceStack/ServiceStack
2
https://github.com/adamhathcock/sharpcompress
2
https://github.com/nirbar/wix4
2
https://github.com/tgstation/tgstation-server
2
https://github.com/peteroupc/CBOR
2
https://github.com/Microsoft/ChakraCore
2
https://github.com/moment/moment
2
https://github.com/mganss/HtmlSanitizer
2
https://github.com/nirbar/wix3
2
https://github.com/dotnet/msbuild
2
https://github.com/open-telemetry/opentelemetry-dotnet
2
https://github.com/joniles/mpxj
2
https://github.com/orchardcms/orchardcore
2
https://github.com/theori-io/chakra-2016-11
2
https://github.com/microsoft/reverse-proxy
2
https://github.com/amazon-ion/ion-dotnet
2
https://github.com/haf/DotNetZip.Semverd
2
https://github.com/FormCms/FormCms
2
https://github.com/dotnet/corefx
2
https://github.com/Orckestra/C1-CMS-Foundation
2
https://github.com/SeriaWei/ZKEACMS
1
https://github.com/CoreWCF/CoreWCF
1
https://github.com/italia/cie-aspnetcore
1
https://github.com/dnnsoftware/dnn.platform
1
https://github.com/DuendeSoftware/Duende.AccessTokenManagement
1
https://github.com/microsoft/DirectXTex
1
https://github.com/IowaComputerGurus/aspnetcore.utilities.cloudstorage
1
https://github.com/Jasig/phpCAS
1
https://github.com/AsynkronIT/Wire
1
https://github.com/kubernetes/kubernetes
1
https://github.com/adplug/adplug
1
https://github.com/elastic/apm-agent-dotnet
1
https://github.com/MessagePack-CSharp/MessagePack-CSharp
1
https://github.com/dotnet/diagnostics
1
https://github.com/trannamtrung1st/elFinder.Net.Core
1
https://github.com/imazen/imageflow
1
https://github.com/starkbank/ecdsa-python
1
https://github.com/umbraco/Umbraco.Commerce.Issues
1
https://github.com/jstedfast/MimeKit
1
https://github.com/ravibpatel/AutoUpdater.NET
1
https://github.com/couchbase/couchbase-net-client
1
https://github.com/italia/spid-aspnetcore
1
https://github.com/umbraco/Umbraco.Workflow.Issues
1
https://github.com/Bluegrams/YoutubeDLSharp
1
https://github.com/TrueLayer/truelayer-dotnet
1
https://github.com/neuecc/MessagePack-CSharp
1
https://github.com/Brondahl/EnumStringValues
1
https://github.com/microsoft/bond
1
https://github.com/riganti/dotvvm
1
https://github.com/open-telemetry/opentelemetry-dotnet-instrumentation
1
https://github.com/mguinness/elFinder.AspNet
1
https://github.com/AzureAD/microsoft-authentication-library-for-dotnet
1
https://github.com/QuantConnect/Lean
1
https://github.com/pentesttoolscom/vulnerability-research
1
https://github.com/microsoft/ChakraCore
1
https://github.com/madskristensen/Miniblog.Core
1
https://github.com/drewnoakes/metadata-extractor-dotnet
1
https://github.com/apache/lucenenet
1
https://github.com/microsoft/botbuilder-dotnet
1
https://github.com/imazen/resizer
1
https://github.com/PowerShell/Announcements
1
https://github.com/jonschlinkert/set-value
1
https://gitlab.com/eLeN3Re/cve-2020-9472
1
https://github.com/glennrp/libpng
1
https://github.com/OPCFoundation/UA-.NET-Legacy
1
https://github.com/spassarop/antisamy-dotnet
1
https://github.com/Azure/azure-sdk-for-go
1
https://github.com/aaubry/YamlDotNet
1
https://github.com/moq/moq
1
https://github.com/apache/avro
1
https://github.com/NancyFx/Nancy
1
https://github.com/blogifierdotnet/Blogifier
1
https://github.com/mwilliamson/mammoth.js
1
https://github.com/dotnetcore/AgileConfig
1
https://github.com/Archomeda/Gw2Sharp
1
https://github.com/npgsql/npgsql
1
https://github.com/google/protobuf
1
https://github.com/AzureAD/microsoft-identity-web
1
https://github.com/Antaris/RazorEngine
1
https://github.com/LittleBigRefresh/Bunkum
1
https://gitlab.com/eLeN3Re/cve-2020-9471
1
https://github.com/DuendeSoftware/foss
1
https://github.com/git-ecosystem/git-credential-manager
1
https://github.com/snapappointments/bootstrap-select
1
https://github.com/ldqk/Masuit.Tools
1
https://github.com/MichaelGrafnetter/DSInternals
1
https://github.com/dub-flow/vulnerability-research
1
https://github.com/turquoiseowl/i18n
1
https://github.com/JamesNK/Newtonsoft.Json
1
https://github.com/gsemac/Gsemac.Common
1
https://github.com/jellyfin/jellyfin-web
1
https://github.com/recurly/recurly-client-net
1
https://github.com/sshnet/NET
1
https://github.com/serilog-contrib/serilog-enrichers-clientinfo
1
https://github.com/jellyfin/jellyfin
1
https://github.com/Shazwazza/Smidge
1
https://github.com/SeppPenner/WindowsHello
1
https://github.com/mbdavid/LiteDB
1
https://github.com/jchristn/IpMatcher
1
https://github.com/personnummer/csharp
1
https://github.com/google/brotli
1
https://github.com/kapetan/dns
1
https://github.com/SinGooCMS/SinGooCMSUtility
1
https://github.com/NuGet/Home
1
https://github.com/brantburnett/Snappier
1
https://github.com/OrchardCMS/OrchardCore
1
https://github.com/FastReports/FastReport
1
https://github.com/jquery-validation/jquery-validation
1
https://github.com/nhibernate/nhibernate-core
1
https://github.com/Devolutions/XTS.NET
1
https://github.com/apache/logging-log4net
1
https://github.com/starkbank/ecdsa-dotnet
1
https://github.com/HangfireIO/Hangfire
1
https://github.com/MarimerLLC/csla
1
https://github.com/apache/activemq-nms-openwire
1
https://github.com/SteeltoeOSS/security-advisories
1