NuGet Package Vulnerabilities
Browse packages with source-attributed vulnerability advisories in the NuGet ecosystem.
Packages
- Microsoft.ChakraCore247 vulnerabilities
- Magick.NET-Q16-AnyCPU163 vulnerabilities
- Magick.NET-Q16-HDRI-AnyCPU163 vulnerabilities
- Magick.NET-Q8-AnyCPU163 vulnerabilities
- Magick.NET-Q16-HDRI-x86162 vulnerabilities
- Magick.NET-Q16-x86161 vulnerabilities
- Magick.NET-Q8-x86161 vulnerabilities
- Magick.NET-Q16-HDRI-OpenMP-arm64159 vulnerabilities
- Magick.NET-Q16-HDRI-x64159 vulnerabilities
- Magick.NET-Q16-OpenMP-arm64159 vulnerabilities
- Magick.NET-Q16-OpenMP-x64159 vulnerabilities
- Magick.NET-Q16-arm64159 vulnerabilities
- Magick.NET-Q16-HDRI-arm64158 vulnerabilities
- Magick.NET-Q8-OpenMP-arm64158 vulnerabilities
- Magick.NET-Q8-arm64158 vulnerabilities
- Magick.NET-Q8-OpenMP-x64155 vulnerabilities
- Magick.NET-Q16-x64154 vulnerabilities
- Magick.NET-Q8-x64152 vulnerabilities
- Magick.NET-Q16-HDRI-OpenMP-x6495 vulnerabilities
- Magick.NET-Q16-OpenMP-x8667 vulnerabilities
- DotNetNuke.Core36 vulnerabilities
- Microsoft.AspNetCore.App.Runtime.win-x6427 vulnerabilities
- Microsoft.AspNetCore.App.Runtime.win-x8626 vulnerabilities
- Microsoft.AspNetCore.App.Runtime.win-arm25 vulnerabilities
- Microsoft.AspNetCore.App.Runtime.linux-x6424 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)## Summary `TurnServer.ReceiveUdpAsync` places its generic `catch (Exception)` OUTSIDE the `while` receive loop, and `Start()` launches the loop fire-and-forget with no supervision or restart. A single pre-authentication UDP datagram whose STUN header first byte is in `0x80–0xFF` causes `STUNHeader.ParseSTUNHeader` to throw `ApplicationException`, which unwinds past the loop and terminates it. The TURN UDP relay is then dead for ALL clients until the process is restarted. ## Root Cause `src/SIP… | CVSS-v3.1 | EPSS- | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing## Summary `SctpSackChunk.ParseChunk` reads the `numGapAckBlocks` and `numDuplicateTSNs` fields (each up to 65535) directly from an attacker-controlled SCTP SACK chunk and loops that many times reading 4 bytes per iteration, with no validation of the counts against the chunk length or the receive buffer. A single crafted SACK chunk from a negotiated WebRTC peer forces reads past the end of the 262144-byte receive buffer, raising `IndexOutOfRangeException`, which is not caught by the recoverable … | CVSS-v3.1 | EPSS- | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames## Summary `ScpClient.Download(string directoryName, DirectoryInfo directoryInfo)` writes files and directories using names returned by the remote SCP server during recursive downloads, with no validation that the resulting path stays inside the requested local directory. A malicious, compromised, or man-in-the-middle SCP server can return names containing `../` sequences (or absolute paths), causing the client to create directories and write/overwrite files anywhere the client process has acce… | CVSS-v3.1 | EPSS- | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2026-62898HIGH | Microsoft QUIC Information Disclosure Vulnerability## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft QUIC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. ## Announcement Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/426 ## CVSS Details - **Ver… CWE-416Aug 11, 2026 | CVSS7.5v3.1 | EPSS1.14% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-70354HIGH | .NET Core Remote Code Execution Vulnerability## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. ## Announcement Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/432 ## CVSS Details - **Versi… CWE-787Aug 11, 2026 | CVSS7.8v3.1 | EPSS0.387% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-62886HIGH | .NET Elevation of Privilege Vulnerability## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. ## Announcement Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/430 ## CVSS D… | CVSS7.8v3.1 | EPSS0.405% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-62871HIGH | .NET Elevation of Privilege Vulnerability## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. ## Announcement Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/431 ## CVSS Details - **Version:… | CVSS7.8v3.1 | EPSS0.405% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-62909HIGH | .NET Elevation of Privilege Vulnerability## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET diagnostics IPC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A missing error check in .NET causes an improper ACL to be applied to a shared resource, resulting in local elevation of privilege. ## Announcement Announcement for this issue can be found at https://github.com/dotnet/announcements/issue… | CVSS7.8v3.1 | EPSS0.295% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-62902MEDIUM | .NET Information Disclosure Vulnerability## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A specially crafted document parsed in .NET can trigger the inclusion of functionality from an untrusted control sphere, allowing an unauthorized attacker to disclose information over a network. ## Announcement Announcement fo… | CVSS6.5v3.1 | EPSS0.779% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-62901HIGH | .NET Denial of Service Vulnerability## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.WebSockets. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. ## Announcement Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/428 ## CVSS Detail… CWE-606Aug 11, 2026 | CVSS7.5v3.1 | EPSS1.08% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-62899MEDIUM | .NET Security Feature Bypass Vulnerability## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.HttpListener. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network. ## Announcement Announcement for this issue can be found at https://… CWE-444Aug 11, 2026 | CVSS5.9v3.1 | EPSS0.721% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-62897HIGH | .NET Framework Remote Code Execution Vulnerability## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or wraparound in .NET allows an unauthorized attacker to execute code locally. ## Announcement Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/434 ## CVSS Details… CWE-190Aug 11, 2026 | CVSS7.0v3.1 | EPSS0.336% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-62946MEDIUM | ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit buildsImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2-27, processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, leading to a heap buffer over-write. This issue has been fixed in versions 6.9.13-52 and 7.1.2-27. CWE-190Jul 30, 2026 | CVSS5.1v3.1 | EPSS0.123% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-62363MEDIUM | ImageMagick: Heap Buffer Over-Write in fx operationImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer over-write can occur in the fx operation by passing a crafted argument. This issue has been fixed in version 7.1.2-27. CWE-787Jul 30, 2026 | CVSS5.0v3.1 | EPSS0.132% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-62343MEDIUM | ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is providedImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 and above prior to 7.1.2-26, an invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26. CWE-190Jul 29, 2026 | CVSS4.7v3.1 | EPSS0.124% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)### Impact A single malformed inbound UDP packet on the RTP/ICE socket can remotely terminate an active RTP or WebRTC media session. The packet receive handler indexes packet (and STUN attribute) bytes without sufficient length checks and throws, and the UDP receive loop converted any such exception into a channel `Close` rather than dropping the packet. One small, unauthenticated packet therefore ends the media session. This is reachable during ICE connectivity checks — before the DTLS handsh… | CVSS-v3.1 | EPSS- | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion## Summary The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. We identified an issue in which explicitly setting `encrypted: true` on the `S3LoggingOptions` property of an AWS CodeBuild project construct produces the opposite of the intended behavior, disabling encryption on CodeBuild build logs stored in S3. ## Impact The `S3LoggingOptions.encrypted` property in the… | CVSS-v3.1 | EPSS- | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)### Impact Kiota generates AI plugin manifests from an OpenAPI description. When the description contains an `x-ai-capabilities` response semantics `static_template` (or the adaptive-card extension `x-ai-adaptive-card`), the `file` reference is written into the generated manifest's `response_semantics.static_template.file` and is later resolved by the AI host **relative to the plugin package**. An attacker who controls or tampers with the OpenAPI description consumed by Kiota can supply a `fil… | CVSS-v4.0 | EPSS- | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
ImageMagick: Heap Buffer Over-Write in X11 import with crafted window titleRunning an X11 import with a crafted window title can result in a heap buffer over-write. CWE-122Jul 24, 2026 | CVSS-v3.1 | EPSS- | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specifiedAn invalid tiff:tile-geometry will cause a memory leak in the TIFF encoder. CWE-401Jul 24, 2026 | CVSS-v3.1 | EPSS- | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
ImageMagick: Memory Leak in ICON decoder when allocation failsA memory leak will occur in the ICON decoder when an allocation fails. CWE-401Jul 24, 2026 | CVSS-v3.1 | EPSS- | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
ImageMagick: Memory leak in VIFF encoder when allocation failsWhen an allocation fails in the VIFF encoder a memory leak will occus. CWE-401Jul 24, 2026 | CVSS-v3.1 | EPSS- | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
ImageMagick: Memory Leak in MIFF encoder when allocaton failsA memory leak will occur in the MIFF encoder when an allocation fails. CWE-401Jul 24, 2026 | CVSS-v3.1 | EPSS- | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
ImageMagick: Memory Leak in YUV decoder when opening of blob failsA memory leak will occur when a blob cannot be opened in the YUV decoder. CWE-401Jul 24, 2026 | CVSS-v3.1 | EPSS- | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
ImageMagick: Memory Leak in TIFF encoder when an allocation failsWhen an allocation fails in the TIFF encoder a small memory leak will occur. CWE-401Jul 24, 2026 | CVSS-v3.1 | EPSS- | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |