# NuGet Advisories.

Every NuGet Advisory we hold (.NET), newest first.

## Records, newest first

- [Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability](https://agentprime.io/advisories/GHSA-p3jp-9v83-76w9.md)
  `GHSA-p3jp-9v83-76w9` · NuGet `Microsoft.DotNet.ILCompiler` and 76 more: affected `>=8.0.0, <8.0.33 || >=9.0.0, <9.0.22 || >=10.0.0, <10.0.14 || >=11.0.0-preview.1.26104.118, <11.0.0-rc.3.26522.148`, fixed in `8.0.33`, `9.0.22`, `10.0.14`, `11.0.0-rc.3.26522.148` · CVSS 8.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: Memory corruption
- [Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution](https://agentprime.io/advisories/GHSA-h26j-4vp7-x9w2.md)
  `GHSA-h26j-4vp7-x9w2`, `CVE-2026-62848` · NuGet `Metalama.Framework`: affected `<2025.1.18 || >=2026.0.1-preview, <2026.0.25 || >=2026.1.0-preview, <2026.1.19`, fixed in `2025.1.18`, `2026.0.25`, `2026.1.19` · CVSS 7.3 High · Not analysed yet · Published 3 Nov 2026 · Tags: Insecure deserialization, CWE-913
- [MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)](https://agentprime.io/advisories/GHSA-473q-m89c-ghf8.md)
  `GHSA-473q-m89c-ghf8` · NuGet `MySqlConnector`: affected `<2.6.1`, fixed in `2.6.1` · CVSS 4.0, no score published · Not analysed yet · Published 28 Oct 2026 · Tags: Information disclosure
- [TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin \`data-mce-object\` serialization](https://agentprime.io/advisories/GHSA-mf2p-h6hf-fcwm.md)
  `GHSA-mf2p-h6hf-fcwm`, `CVE-2026-116675`, `PKSA-bdqg-yq3b-xsg6` · npm `tinymce` and 2 more: affected `>=7.9.3, <7.9.4 || >=8.5.1, <8.9.3`, fixed in `7.9.4`, `8.9.3` · CVSS 8.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Cross-site scripting (XSS)
- [MessagePack: Nested arrays can blow past buffer length limits](https://agentprime.io/advisories/GHSA-qhrr-8q5h-9q3h.md)
  `GHSA-qhrr-8q5h-9q3h`, `CVE-2026-92707` · NuGet `MessagePack`: affected `<2.5.303 || >=3.0.0, <3.1.9`, fixed in `2.5.303`, `3.1.9` · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-1325
- [Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion](https://agentprime.io/advisories/GHSA-7pxr-59rr-hqj2.md)
  `GHSA-7pxr-59rr-hqj2`, `CVE-2026-72923` · NuGet `Microsoft.OpenApi.Readers` and 1 more: affected `<1.6.30`, fixed in `1.6.30` · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Metalama allows local code execution through DLL planting in shared temporary directories](https://agentprime.io/advisories/GHSA-m6wq-39m7-9xpp.md)
  `GHSA-m6wq-39m7-9xpp`, `CVE-2026-62847` · NuGet `Metalama.Framework` and 1 more: affected `<2025.1.18 || >=2026.0.0-preview, <2026.0.25 || >=2026.1.0-preview, <2026.1.19`, fixed in `2025.1.18`, `2026.0.25`, `2026.1.19` · CVSS 8.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-377, CWE-427
- [Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-4j9v-h7pp-725h.md)
  `GHSA-4j9v-h7pp-725h`, `CVE-2026-70035` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Insecure deserialization
- [Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-mf4x-w4gh-4656.md)
  `GHSA-mf4x-w4gh-4656`, `CVE-2026-70186` · NuGet `Microsoft.AspNetCore.App.Runtime.linux-arm` and 10 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13`, fixed in `8.0.32`, `9.0.21`, `10.0.13` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-pfwj-2f93-rf42.md)
  `GHSA-pfwj-2f93-rf42`, `CVE-2026-70007` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-c27m-942f-rcfh.md)
  `GHSA-c27m-942f-rcfh`, `CVE-2026-87697` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Insecure deserialization
- [Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability](https://agentprime.io/advisories/GHSA-w6wh-p4g7-mpj2.md)
  `GHSA-w6wh-p4g7-mpj2`, `CVE-2026-96225` · NuGet `Microsoft.NETCore.App.Runtime.linux-arm` and 7 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-qjpx-jqm5-h2c4.md)
  `GHSA-qjpx-jqm5-h2c4`, `CVE-2026-96230` · NuGet `Microsoft.AspNetCore.Components.WebAssembly.Server`: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege Vulnerability](https://agentprime.io/advisories/GHSA-vrrp-6v32-2p8g.md)
  `GHSA-vrrp-6v32-2p8g`, `CVE-2026-70179` · NuGet `Microsoft.AspNetCore.Authentication.Negotiate`: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13`, fixed in `8.0.32`, `9.0.21`, `10.0.13` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-xq57-crx4-g373.md)
  `GHSA-xq57-crx4-g373`, `CVE-2026-96224` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-f63g-mx39-3r38.md)
  `GHSA-f63g-mx39-3r38`, `CVE-2026-85363` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-c399-9853-6jmj.md)
  `GHSA-c399-9853-6jmj`, `BIT-dotnet-2026-96959`, `BIT-dotnet-sdk-2026-96959`, `CVE-2026-96959` · NuGet `System.Security.Cryptography.Xml`: affected `>=8.0.0, <8.0.5 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.5`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-4w5f-7jp2-w48g.md)
  `GHSA-4w5f-7jp2-w48g`, `CVE-2026-83520` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Insecure deserialization
- [Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-f749-vhgx-39h6.md)
  `GHSA-f749-vhgx-39h6`, `CVE-2026-70174` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-358
- [Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-f8qh-mqg4-9939.md)
  `GHSA-f8qh-mqg4-9939`, `CVE-2026-96232` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-fq6x-pvr9-888r.md)
  `GHSA-fq6x-pvr9-888r`, `CVE-2026-96234` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-346
- [Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-5qr9-xxm9-6cmq.md)
  `GHSA-5qr9-xxm9-6cmq`, `CVE-2026-96229` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-183
- [Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-g44w-h65v-4cw9.md)
  `GHSA-g44w-h65v-4cw9`, `CVE-2026-96235` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability](https://agentprime.io/advisories/GHSA-vrv5-2jg9-4mmr.md)
  `GHSA-vrv5-2jg9-4mmr`, `BIT-dotnet-2026-96222`, `BIT-dotnet-sdk-2026-96222`, `CVE-2026-96222` · NuGet `System.Security.Cryptography.Xml`: affected `>=8.0.0, <8.0.5`, fixed in `8.0.5` · CVSS 7.4 High · Not analysed yet · Published 13 Oct 2026 · Tags: Weak cryptography or TLS
- [Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability](https://agentprime.io/advisories/GHSA-2j93-m82w-73j2.md)
  `GHSA-2j93-m82w-73j2`, `CVE-2026-96231` · NuGet `Microsoft.NETCore.App.Runtime.linux-arm` and 7 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-2mxg-prvg-9jfg.md)
  `GHSA-2mxg-prvg-9jfg`, `CVE-2026-85790` · NuGet `Microsoft.Native.Quic.MsQuic.Schannel`: affected `>=1.9.0, <2.5.12 || >=2.6.0, <2.6.3`, fixed in `2.5.12`, `2.6.3` · CVSS 5.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-wxxw-5cvc-53j7.md)
  `GHSA-wxxw-5cvc-53j7`, `CVE-2026-66822` · NuGet `Microsoft.NETCore.App.Runtime.linux-arm` and 10 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 5.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure
- [Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability](https://agentprime.io/advisories/GHSA-rv87-ccxw-8ggf.md)
  `GHSA-rv87-ccxw-8ggf`, `BIT-aspnet-core-2026-88092`, `CVE-2026-88092` · NuGet `Microsoft.AspNetCore.App.Runtime.linux-arm` and 10 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: HTTP request smuggling
- [Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability](https://agentprime.io/advisories/GHSA-fpq8-4vhr-rcxx.md)
  `GHSA-fpq8-4vhr-rcxx`, `CVE-2026-70188` · NuGet `Microsoft.AspNetCore.App.Runtime.linux-arm` and 10 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: HTTP request smuggling
- [Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-f4g7-52wc-p8x7.md)
  `GHSA-f4g7-52wc-p8x7`, `CVE-2026-96236` · NuGet `Microsoft.AspNetCore.App.Runtime.linux-arm` and 10 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-4mpw-cpwj-hxxj.md)
  `GHSA-4mpw-cpwj-hxxj`, `CVE-2026-70197` · NuGet `Microsoft.NETCore.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.33 || >=9.0.0, <9.0.22 || >=10.0.0, <10.0.14 || >=11.0.0-preview.1, <11.0.0-rc.3.26522.148`, fixed in `8.0.33`, `9.0.22`, `10.0.14`, `11.0.0-rc.3.26522.148` · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-3rxq-g8rj-r2cf.md)
  `GHSA-3rxq-g8rj-r2cf`, `CVE-2026-69651` · NuGet `Microsoft.NETCore.App.Runtime.linux-arm` and 10 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-g27p-qf6j-c96c.md)
  `GHSA-g27p-qf6j-c96c`, `CVE-2026-102870` · NuGet `Microsoft.AspNetCore.Components.WebAssembly.Server`: affected `>=10.0.0, <10.0.14 || >=11.0.0-preview.1, <11.0.0-rc.3.26522.148`, fixed in `10.0.14`, `11.0.0-rc.3.26522.148` · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-7hqp-7c5m-4vq6.md)
  `GHSA-7hqp-7c5m-4vq6`, `BIT-dotnet-2026-96960`, `BIT-dotnet-sdk-2026-96960`, `CVE-2026-96960` · NuGet `System.Security.Cryptography.Xml`: affected `>=8.0.0, <8.0.5 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.5`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-405
- [Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-87vj-4hqv-22p9.md)
  `GHSA-87vj-4hqv-22p9`, `CVE-2026-96233` · NuGet `Microsoft.NETCore.App.Runtime.linux-arm` and 11 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-86xp-94pg-8r6r.md)
  `GHSA-86xp-94pg-8r6r` · NuGet `Microsoft.AspNetCore.SignalR.Protocols.MessagePack`: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.5, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-1325
- [Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-2fmv-rv2c-59x7.md)
  `GHSA-2fmv-rv2c-59x7`, `CVE-2026-70162` · NuGet `System.Security.Cryptography.Pkcs`: affected `>=8.0.0, <8.0.2 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.2`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 5.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-405
- [Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-r955-8q5j-3h83.md)
  `GHSA-r955-8q5j-3h83`, `BIT-dotnet-2026-96958`, `BIT-dotnet-sdk-2026-96958`, `CVE-2026-96958` · NuGet `System.Security.Cryptography.Xml`: affected `>=8.0.0, <8.0.5 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.5`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Microsoft Security Advisory CVE-2026-84008 - .NET Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-846f-f764-76mx.md)
  `GHSA-846f-f764-76mx`, `CVE-2026-84008` · NuGet `System.Security.Cryptography.Pkcs`: affected `>=8.0.0, <8.0.2 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.2`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-mc4q-93x5-f6hj.md)
  `GHSA-mc4q-93x5-f6hj`, `CVE-2026-58280` · NuGet `Microsoft.NETCore.App.Runtime.linux-arm` and 11 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability](https://agentprime.io/advisories/GHSA-fqpq-cx42-9jmm.md)
  `GHSA-fqpq-cx42-9jmm`, `CVE-2026-70194` · NuGet `Microsoft.NETCore.App.Runtime.linux-arm` and 7 more: affected `>=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `11.0.0-rc.2` · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Weak cryptography or TLS
- [Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability](https://agentprime.io/advisories/GHSA-494h-xx7x-5frh.md)
  `GHSA-494h-xx7x-5frh`, `CVE-2026-70183` · NuGet `Microsoft.AspNetCore.App.Runtime.linux-arm` and 11 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition
- [Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-57xr-hfxx-jw5x.md)
  `GHSA-57xr-hfxx-jw5x`, `CVE-2026-70196` · NuGet `Microsoft.AspNetCore.App.Runtime.linux-arm` and 11 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13`, fixed in `8.0.32`, `9.0.21`, `10.0.13` · CVSS 5.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-5gjq-3f94-rcf7.md)
  `GHSA-5gjq-3f94-rcf7`, `CVE-2026-105016` · NuGet `Microsoft.Native.Quic.MsQuic.Schannel`: affected `>=2.5.11-ci.156755675, <2.5.11-ci.159417053`, fixed in `2.5.11-ci.159417053` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-w5qq-qrpp-rf4c.md)
  `GHSA-w5qq-qrpp-rf4c`, `CVE-2026-70181` · NuGet `Microsoft.AspNetCore.App.Runtime.linux-arm` and 11 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13`, fixed in `8.0.32`, `9.0.21`, `10.0.13` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability](https://agentprime.io/advisories/GHSA-x3vp-85cm-q97r.md)
  `GHSA-x3vp-85cm-q97r`, `CVE-2026-70175` · NuGet `Microsoft.AspNetCore.App.Runtime.linux-arm` and 11 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13`, fixed in `8.0.32`, `9.0.21`, `10.0.13` · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-640
- [Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-334f-vvp4-7g6p.md)
  `GHSA-334f-vvp4-7g6p`, `CVE-2026-70159` · NuGet `Microsoft.AspNetCore.SignalR.Common`: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.5, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer](https://agentprime.io/advisories/GHSA-jjfr-hcj7-qf5w.md)
  `GHSA-jjfr-hcj7-qf5w`, `CVE-2026-106115` · NuGet `SixLabors.ImageSharp`: affected `>=2.1.0, <3.2.0 || >=4.0.0, <4.1.2`, fixed in `3.2.0`, `4.1.2` · CVSS 7.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption
- [ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate](https://agentprime.io/advisories/GHSA-4q3p-rj5x-xv7p.md)
  `GHSA-4q3p-rj5x-xv7p`, `CVE-2026-106111` · NuGet `SixLabors.ImageSharp`: affected `>=4.0.0, <4.1.2`, fixed in `4.1.2` · CVSS 5.9 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-226
- [ImageSharp: ICC LUT16 output channel count can write beyond Vector4](https://agentprime.io/advisories/GHSA-ffp7-56pq-64mr.md)
  `GHSA-ffp7-56pq-64mr`, `CVE-2026-106112` · NuGet `SixLabors.ImageSharp`: affected `>=4.0.0, <4.1.2`, fixed in `4.1.2` · CVSS 7.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption
- [ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop](https://agentprime.io/advisories/GHSA-wmxv-xphr-5c9g.md)
  `GHSA-wmxv-xphr-5c9g`, `CVE-2026-106116` · NuGet `SixLabors.ImageSharp`: affected `>=2.0.0, <3.2.0 || >=4.0.0, <4.1.2`, fixed in `3.2.0`, `4.1.2` · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service
- [ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer](https://agentprime.io/advisories/GHSA-j9gm-c75j-xc9q.md)
  `GHSA-j9gm-c75j-xc9q`, `CVE-2026-106110` · NuGet `SixLabors.ImageSharp`: affected `>=2.0.0, <3.2.0 || >=4.0.0, <4.1.2`, fixed in `3.2.0`, `4.1.2` · CVSS 7.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption
- [ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index](https://agentprime.io/advisories/GHSA-j3p4-wp97-rph4.md)
  `GHSA-j3p4-wp97-rph4`, `CVE-2026-106113` · NuGet `SixLabors.ImageSharp`: affected `>=2.0.0, <3.2.0 || >=4.0.0, <4.1.2`, fixed in `3.2.0`, `4.1.2` · CVSS 7.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption
- [ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions](https://agentprime.io/advisories/GHSA-gwg2-r3hj-4w44.md)
  `GHSA-gwg2-r3hj-4w44`, `CVE-2026-106114` · NuGet `SixLabors.ImageSharp`: affected `>=1.0.0-beta0001, <3.2.0 || >=4.0.0, <4.1.2`, fixed in `3.2.0`, `4.1.2` · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service
- [ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write](https://agentprime.io/advisories/GHSA-v76p-62qx-wwq2.md)
  `GHSA-v76p-62qx-wwq2`, `CVE-2026-106118` · NuGet `SixLabors.ImageSharp`: affected `>=3.0.0, <3.2.0 || >=4.0.0, <4.1.1`, fixed in `3.2.0`, `4.1.1` · CVSS 7.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption
- [ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp](https://agentprime.io/advisories/GHSA-jj3q-cwqj-842r.md)
  `GHSA-jj3q-cwqj-842r`, `CVE-2026-106117` · NuGet `ImageSharp`: affected `>=3.0.0, <3.2.0 || >=4.0.0, <4.1.1`, fixed in `3.2.0`, `4.1.1` · CVSS 7.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption
- [Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests](https://agentprime.io/advisories/GHSA-6gw6-rv2g-25mg.md)
  `GHSA-6gw6-rv2g-25mg`, `CVE-2026-105795` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `>=1.25.1, <1.35.0`, fixed in `1.35.0` · CVSS 3.1 Low · Not analysed yet · Published 6 Oct 2026 · Tags: Path traversal
- [Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators](https://agentprime.io/advisories/GHSA-rm89-rhwj-9j92.md)
  `GHSA-rm89-rhwj-9j92`, `CVE-2026-105796` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `>=0.5.0, <1.35.0`, fixed in `1.35.0` · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Code injection
- [MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL](https://agentprime.io/advisories/GHSA-w5f4-fx9m-m4q7.md)
  `GHSA-w5f4-fx9m-m4q7`, `CVE-2026-105794` · NuGet `Microsoft.Native.Quic.MsQuic.OpenSSL`: affected `<2.4.20 || >=2.5.0, <2.5.11 || >=2.6.0, <2.6.1`, fixed in `2.4.20`, `2.5.11`, `2.6.1` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Weak cryptography or TLS
- [CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers](https://agentprime.io/advisories/GHSA-wrvw-254r-wpmv.md)
  `GHSA-wrvw-254r-wpmv`, `CVE-2026-100368` · NuGet `AlastairLundy.CliInvoke.Specializations` and 1 more: affected `>=1.0.0-rc.1, <2.0.2`, fixed in `2.0.2` · CVSS 8.4 High · Not analysed yet · Published 25 Sept 2026 · Tags: Command injection

Older: <https://agentprime.io/advisories/ecosystem/nuget.md?cursor=WyIyMDI2LTA5LTI1VDIxOjQxOjQ4LjAwMDAwMFoiLCJHSFNBLXdydnctMjU0ci13cG12Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?ecosystem=NuGet>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/ecosystem/nuget/>. Everything for agents: <https://agentprime.io/llms.txt>.