# NuGet Advisories.

Every NuGet Advisory we hold (.NET), newest first.

## Records, newest first (an older page)

- [ImageMagick has an Infinite Loop in subimage-search with crafted image](https://agentprime.io/advisories/GHSA-5v62-8fq6-cp9m.md)
  `GHSA-5v62-8fq6-cp9m`, `CVE-2026-48733` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.14.0`, fixed in `14.14.0` · CVSS 4.7 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Denial of service
- [ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method](https://agentprime.io/advisories/GHSA-2hhq-c99x-492r.md)
  `GHSA-2hhq-c99x-492r`, `CVE-2026-48724` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.14.0`, fixed in `14.14.0` · CVSS 5.5 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption
- [MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic arguments](https://agentprime.io/advisories/GHSA-qhmf-xw27-6rqr.md)
  `GHSA-qhmf-xw27-6rqr`, `CVE-2026-48517` · NuGet `MessagePack`: affected `<2.5.301 || >=3.0, <3.1.7`, fixed in `2.5.301`, `3.1.7` · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Code injection, Insecure deserialization
- [MessagePack-CSharp: InterfaceLookupFormatter bypasses collision-resistant comparer settings](https://agentprime.io/advisories/GHSA-q2h6-ghwm-5qm8.md)
  `GHSA-q2h6-ghwm-5qm8`, `CVE-2026-48516` · NuGet `MessagePack`: affected `<2.5.301 || >=3.0, <3.1.7`, fixed in `2.5.301`, `3.1.7` · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Denial of service
- [MessagePack-CSharp: Multi-dimensional array formatters allocate from unchecked dimensions](https://agentprime.io/advisories/GHSA-cxmj-83gh-fp49.md)
  `GHSA-cxmj-83gh-fp49`, `CVE-2026-48515` · NuGet `MessagePack`: affected `<2.5.301 || >=3.0, <3.1.7`, fixed in `2.5.301`, `3.1.7` · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Denial of service
- [MessagePack-CSharp: Unity unsafe blit formatter allocates from unbounded byte length](https://agentprime.io/advisories/GHSA-w567-gjr2-hm5j.md)
  `GHSA-w567-gjr2-hm5j`, `CVE-2026-48514` · NuGet `MessagePack`: affected `<2.5.301 || >=3.0, <3.1.7`, fixed in `2.5.301`, `3.1.7` · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Denial of service
- [MessagePack-CSharp: DynamicUnionResolver-generated deserializers miss depth enforcement](https://agentprime.io/advisories/GHSA-wfr3-xj75-pfwh.md)
  `GHSA-wfr3-xj75-pfwh`, `CVE-2026-48513` · NuGet `MessagePack`: affected `<2.5.301 || >=3.0, <3.1.7`, fixed in `2.5.301`, `3.1.7` · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Denial of service
- [MessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcement](https://agentprime.io/advisories/GHSA-cj9g-3mj2-g8vv.md)
  `GHSA-cj9g-3mj2-g8vv`, `CVE-2026-48512` · NuGet `MessagePack`: affected `<2.5.301 || >=3.0, <3.1.7`, fixed in `2.5.301`, `3.1.7` · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Denial of service
- [MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted maps](https://agentprime.io/advisories/GHSA-2x83-8g95-xh59.md)
  `GHSA-2x83-8g95-xh59`, `CVE-2026-48511` · NuGet `MessagePack`: affected `<2.5.301 || >=3.0, <3.1.7`, fixed in `2.5.301`, `3.1.7` · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Denial of service
- [MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengths](https://agentprime.io/advisories/GHSA-v72x-2h86-7f8m.md)
  `GHSA-v72x-2h86-7f8m`, `CVE-2026-48510` · NuGet `MessagePack`: affected `<2.5.301 || >=3.0, <3.1.7`, fixed in `2.5.301`, `3.1.7` · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Denial of service, CWE-409
- [MessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodies](https://agentprime.io/advisories/GHSA-2f33-pr97-265q.md)
  `GHSA-2f33-pr97-265q`, `CVE-2026-48509` · NuGet `MessagePack`: affected `<2.5.301 || >=3.0, <3.1.7`, fixed in `2.5.301`, `3.1.7` · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-1188
- [MessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depth](https://agentprime.io/advisories/GHSA-vh6j-jc39-fggf.md)
  `GHSA-vh6j-jc39-fggf`, `CVE-2026-48506` · NuGet `MessagePack`: affected `<2.5.301 || >=3.0, <3.1.7`, fixed in `2.5.301`, `3.1.7` · CVSS 7.5 High · Not analysed yet · Published 25 Jun 2026 · Tags: Denial of service
- [MessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows](https://agentprime.io/advisories/GHSA-382j-8mxh-c7x2.md)
  `GHSA-382j-8mxh-c7x2`, `CVE-2026-48502` · NuGet `MessagePack`: affected `>=3.0, <3.1.7`, fixed in `3.1.7` · CVSS 8.2 High · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption, Denial of service, Code injection, Insecure deserialization
- [Duplicate Advisory: ImageMagick: SVG-to-MVG Command Injection via coders/svg.c](https://agentprime.io/advisories/GHSA-v772-658q-978p.md)
  `GHSA-v772-658q-978p` · NuGet `Magick.NET-Q16-AnyCPU`: affected `<14.10.3`, fixed in `14.10.3` · CVSS 0.0 None · Withdrawn · Not analysed yet · Published 23 Jun 2026 · Tags: Command injection, CWE-116
- [Duplicate Advisory: ImageMagick: Memory leak in coders/txt.c without freetype](https://agentprime.io/advisories/GHSA-98gv-6gmj-cm6m.md)
  `GHSA-98gv-6gmj-cm6m` · NuGet `Magick.NET-Q16-AnyCPU`: affected `<14.10.3`, fixed in `14.10.3` · CVSS 0.0 None · Withdrawn · Not analysed yet · Published 23 Jun 2026 · Tags: Denial of service
- [Duplicate Advisory: ImageMagick has a possible heap Use After Free vulnerability in its meta coder](https://agentprime.io/advisories/GHSA-8g9f-ccmr-vfvg.md)
  `GHSA-8g9f-ccmr-vfvg` · NuGet `Magick.NET-Q16-AnyCPU`: affected `<14.10.3`, fixed in `14.10.3` · CVSS 3.7 Low · Withdrawn · Not analysed yet · Published 23 Jun 2026 · Tags: Memory corruption
- [Duplicate Advisory: ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds](https://agentprime.io/advisories/GHSA-rg39-4fm5-hrp2.md)
  `GHSA-rg39-4fm5-hrp2` · NuGet `Magick.NET-Q8-x86`: affected `<14.10.3`, fixed in `14.10.3` · CVSS 3.7 Low · Withdrawn · Not analysed yet · Published 21 Jun 2026 · Tags: Memory corruption
- [Duplicate Advisory: ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS](https://agentprime.io/advisories/GHSA-jmqv-2mx7-544h.md)
  `GHSA-jmqv-2mx7-544h` · NuGet `Magick.NET-Q16-AnyCPU`: affected `<14.10.3`, fixed in `14.10.3` · CVSS 3.7 Low · Withdrawn · Not analysed yet · Published 21 Jun 2026 · Tags: Memory corruption
- [CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality](https://agentprime.io/advisories/GHSA-2288-8h3r-cqgg.md)
  `GHSA-2288-8h3r-cqgg`, `CVE-2026-54784` · NuGet `CoreWCF.Primitives`: affected `>=1.9.0, <1.9.1`, fixed in `1.9.1` · CVSS 7.4 High · Not analysed yet · Published 19 Jun 2026 · Tags: Weak cryptography or TLS, CWE-523
- [CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages](https://agentprime.io/advisories/GHSA-gqv6-pwcg-87r8.md)
  `GHSA-gqv6-pwcg-87r8`, `CVE-2026-54783` · NuGet `CoreWCF.Primitives`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 7.4 High · Not analysed yet · Published 19 Jun 2026 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-345
- [CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation](https://agentprime.io/advisories/GHSA-xjr9-gg9q-jx3v.md)
  `GHSA-xjr9-gg9q-jx3v`, `CVE-2026-54782` · NuGet `CoreWCF.Primitives`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jun 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced](https://agentprime.io/advisories/GHSA-48pq-2xq3-c2m4.md)
  `GHSA-48pq-2xq3-c2m4`, `CVE-2026-54781` · NuGet `CoreWCF.Primitives`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 7.4 High · Not analysed yet · Published 19 Jun 2026 · Tags: Authentication bypass, CWE-345
- [CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass](https://agentprime.io/advisories/GHSA-4v55-cpmv-3vcm.md)
  `GHSA-4v55-cpmv-3vcm`, `CVE-2026-54780` · NuGet `CoreWCF.Primitives`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 3.7 Low · Not analysed yet · Published 19 Jun 2026 · Tags: Weak cryptography or TLS, CWE-757
- [CoreWCF: SAML token replay protection is inoperative](https://agentprime.io/advisories/GHSA-9jr3-rj99-8jq3.md)
  `GHSA-9jr3-rj99-8jq3`, `CVE-2026-54779` · NuGet `CoreWCF.Primitives`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 5.9 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Authentication bypass
- [CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution](https://agentprime.io/advisories/GHSA-q6v9-43v5-jv9q.md)
  `GHSA-q6v9-43v5-jv9q`, `CVE-2026-54778` · NuGet `CoreWCF.UnixDomainSocket`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 6.2 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Race condition, Memory corruption
- [CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance](https://agentprime.io/advisories/GHSA-6jj2-4q5c-x8g6.md)
  `GHSA-6jj2-4q5c-x8g6`, `CVE-2026-54777` · NuGet `CoreWCF.NetNamedPipe`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 6.5 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Race condition, CWE-665
- [CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade](https://agentprime.io/advisories/GHSA-wjpq-6766-7f5j.md)
  `GHSA-wjpq-6766-7f5j`, `CVE-2026-54776` · NuGet `CoreWCF.UnixDomainSocket`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 4.4 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Authentication bypass
- [CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.](https://agentprime.io/advisories/GHSA-m744-jhq9-ppw6.md)
  `GHSA-m744-jhq9-ppw6`, `CVE-2026-54775` · NuGet `CoreWCF.Kafka`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 6.5 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: CWE-248, CWE-754, CWE-755
- [CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate](https://agentprime.io/advisories/GHSA-rpj7-hr7h-w6p9.md)
  `GHSA-rpj7-hr7h-w6p9`, `CVE-2026-54774` · NuGet `CoreWCF.Primitives`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 7.4 High · Not analysed yet · Published 19 Jun 2026 · Tags: Weak cryptography or TLS, CWE-345
- [CoreWCF: WS-Security signature substitution via document-wide Signature lookup](https://agentprime.io/advisories/GHSA-jc6x-rj79-w4mx.md)
  `GHSA-jc6x-rj79-w4mx`, `CVE-2026-54773` · NuGet `CoreWCF.Primitives`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 5.9 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Weak cryptography or TLS
- [CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake](https://agentprime.io/advisories/GHSA-p86g-xrr2-pf7c.md)
  `GHSA-p86g-xrr2-pf7c`, `CVE-2026-54772` · NuGet `CoreWCF.NetFramingBase`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2026 · Tags: Denial of service
- [NCalc: Denial of Service via Unbounded and Non-Terminating Factorial Evaluation](https://agentprime.io/advisories/GHSA-3w5p-95mh-gq75.md)
  `GHSA-3w5p-95mh-gq75`, `CVE-2026-55254` · NuGet `NCalc.Core` and 1 more: affected `<6.1.1`, fixed in `6.1.1` · CVSS 4.8 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: Memory corruption, Denial of service
- [Microsoft Security Advisory CVE-2026-45491 – .NET Tampering Vulnerability](https://agentprime.io/advisories/GHSA-7q4v-2mr6-5gpx.md)
  `GHSA-7q4v-2mr6-5gpx`, `BIT-dotnet-2026-45491`, `BIT-dotnet-sdk-2026-45491`, `CVE-2026-45491` · NuGet `Microsoft.NETCore.App.Runtime.linux-x64` and 2 more: affected `>=8.0.0, <8.0.28 || >=9.0.0, <9.0.17 || >=10.0.0, <10.0.9`, fixed in `8.0.28`, `9.0.17`, `10.0.9` · CVSS 6.2 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Path traversal
- [Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-f8h2-vmm9-qhj6.md)
  `GHSA-f8h2-vmm9-qhj6`, `BIT-aspnet-core-2026-45591`, `BIT-dotnet-2026-45591`, `BIT-dotnet-sdk-2026-45591`, `CVE-2026-45591` · NuGet `Microsoft.AspNetCore.App.Runtime.linux-x64` and 3 more: affected `>=8.0.0, <8.0.28 || >=9.0.0, <9.0.17 || >=10.0.0, <10.0.9`, fixed in `8.0.28`, `9.0.17`, `10.0.9` · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: Denial of service, Memory corruption
- [MessagePack's LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input](https://agentprime.io/advisories/GHSA-hv8m-jj95-wg3x.md)
  `GHSA-hv8m-jj95-wg3x`, `CVE-2026-48109` · NuGet `MessagePack`: affected `<2.5.301 || >=3.0.214-rc.1, <3.1.7`, fixed in `2.5.301`, `3.1.7` · CVSS 8.2 High · Not analysed yet · Published 11 Jun 2026 · Tags: CWE-20
- [TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin \`data-mce-object\` injection](https://agentprime.io/advisories/GHSA-vg35-5wq7-3x7w.md)
  `GHSA-vg35-5wq7-3x7w`, `CVE-2026-47761`, `PKSA-k4d6-bt7k-7ddp` · npm `tinymce` and 2 more: affected `<=5.10.9 || >=6.0.0, <7.9.3 || >=8.0.0, <8.5.1`, fixed in `7.9.3`, `8.5.1` · CVSS 8.7 High · Not analysed yet · Published 5 Jun 2026 · Tags: Cross-site scripting (XSS)
- [TinyMCE Cross-Site Scripting (XSS) vulnerability through \`mce:protected\` comments](https://agentprime.io/advisories/GHSA-v98h-vmpc-fpqv.md)
  `GHSA-v98h-vmpc-fpqv`, `CVE-2026-47762`, `PKSA-2v47-9p8y-4qt3` · npm `tinymce` and 2 more: affected `<=5.10.9 || >=6.0.0, <7.9.3 || >=8.0.0, <8.5.1`, fixed in `7.9.3`, `8.5.1` · CVSS 8.7 High · Not analysed yet · Published 5 Jun 2026 · Tags: Cross-site scripting (XSS)
- [TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes](https://agentprime.io/advisories/GHSA-q742-qvgc-gc2f.md)
  `GHSA-q742-qvgc-gc2f`, `CVE-2026-47759`, `PKSA-rf1b-835f-6yyv` · npm `tinymce` and 2 more: affected `<=5.10.9 || >=6.0.0, <7.9.3 || >=8.0.0, <8.5.1`, fixed in `7.9.3`, `8.5.1` · CVSS 8.7 High · Not analysed yet · Published 5 Jun 2026 · Tags: Cross-site scripting (XSS)
- [TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs](https://agentprime.io/advisories/GHSA-mh5m-5hw4-5c69.md)
  `GHSA-mh5m-5hw4-5c69`, `CVE-2026-47760`, `PKSA-fp8q-vmhs-msy9` · npm `tinymce` and 2 more: affected `>=6.8.0, <7.1.0`, fixed in `7.1.0` · CVSS 8.7 High · Not analysed yet · Published 5 Jun 2026 · Tags: Cross-site scripting (XSS)
- [Nerdbank.MessagePack has Inefficient CPU Computation](https://agentprime.io/advisories/GHSA-92vj-hp7m-gwcj.md)
  `GHSA-92vj-hp7m-gwcj` · NuGet `Nerdbank.MessagePack`: affected `<1.2.4`, fixed in `1.2.4` · CVSS 5.3 Medium · Not analysed yet · Published 29 May 2026 · Tags: CWE-1176
- [Nerdbank.MessagePack has a memory amplification DoS in collection deserialization](https://agentprime.io/advisories/GHSA-qjvr-435c-5fjh.md)
  `GHSA-qjvr-435c-5fjh` · NuGet `Nerdbank.MessagePack`: affected `<1.1.78`, fixed in `1.1.78` · CVSS 5.3 Medium · Not analysed yet · Published 29 May 2026 · Tags: CWE-405
- [ImageMagick: Heap Buffer Over-Read in distributed pixel cache server](https://agentprime.io/advisories/GHSA-6gxq-f64p-5w6f.md)
  `GHSA-6gxq-f64p-5w6f`, `CVE-2026-47166` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.12.0`, fixed in `14.12.0` · CVSS 5.7 Medium · Not analysed yet · Published 22 May 2026 · Tags: Memory corruption, Authentication bypass
- [ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model](https://agentprime.io/advisories/GHSA-2rgj-gx5x-f62w.md)
  `GHSA-2rgj-gx5x-f62w`, `CVE-2026-47165` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.12.0`, fixed in `14.12.0` · CVSS 4.1 Medium · Not analysed yet · Published 22 May 2026 · Tags: Information disclosure
- [ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking](https://agentprime.io/advisories/GHSA-4g75-9r48-jf92.md)
  `GHSA-4g75-9r48-jf92`, `CVE-2026-46693` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.12.0`, fixed in `14.12.0` · CVSS 4.1 Medium · Not analysed yet · Published 22 May 2026 · Tags: Race condition, CWE-567
- [ImageMagick: Heap Buffer Over-Write in distributed pixel cache server](https://agentprime.io/advisories/GHSA-p93h-f2jc-477j.md)
  `GHSA-p93h-f2jc-477j`, `CVE-2026-46692` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.12.0`, fixed in `14.12.0` · CVSS 4.1 Medium · Not analysed yet · Published 22 May 2026 · Tags: Memory corruption
- [ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse](https://agentprime.io/advisories/GHSA-qv2q-c278-pch5.md)
  `GHSA-qv2q-c278-pch5`, `CVE-2026-56369` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.12.0`, fixed in `14.12.0` · CVSS 6.3 Medium · Not analysed yet · Published 21 May 2026 · Tags: Weak cryptography or TLS, CWE-323
- [ImageMagick: Division by Zero in binomial kernel](https://agentprime.io/advisories/GHSA-vf33-6r7x-66xx.md)
  `GHSA-vf33-6r7x-66xx`, `CVE-2026-56363` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.12.0`, fixed in `14.12.0` · CVSS 4.8 Medium · Not analysed yet · Published 21 May 2026 · Tags: Memory corruption, Denial of service
- [ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix](https://agentprime.io/advisories/GHSA-jqq5-8px3-9m6m.md)
  `GHSA-jqq5-8px3-9m6m` · NuGet `Magick.NET-Q16-HDRI-x64` and 16 more: affected `<14.12.0`, fixed in `14.12.0` · CVSS 6.2 Medium · Not analysed yet · Published 21 May 2026 · Tags: CWE-193
- [Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog](https://agentprime.io/advisories/GHSA-vr9v-27gg-qgx4.md)
  `GHSA-vr9v-27gg-qgx4`, `CVE-2026-46609` · NuGet `Umbraco.Cms`: affected `>=14.0.0, <17.4.0`, fixed in `17.4.0` · CVSS 4.6 Medium · Not analysed yet · Published 21 May 2026 · Tags: Cross-site scripting (XSS)
- [Umbraco.Cms: Open Redirect Vulnerability in Surface Controllers](https://agentprime.io/advisories/GHSA-2qjj-h6wp-c7h7.md)
  `GHSA-2qjj-h6wp-c7h7`, `CVE-2026-46616` · NuGet `Umbraco.Cms`: affected `<13.14.0 || >=17.3.0-rc, <17.4.0`, fixed in `13.14.0`, `17.4.0` · CVSS 5.4 Medium · Not analysed yet · Published 21 May 2026 · Tags: Open redirect
- [OpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycle](https://agentprime.io/advisories/GHSA-5qwm-7pvp-w988.md)
  `GHSA-5qwm-7pvp-w988`, `CVE-2026-45785` · NuGet `OpenMcdf`: affected `<3.1.4`, fixed in `3.1.4` · CVSS 6.2 Medium · Not analysed yet · Published 19 May 2026 · Tags: Denial of service
- [Scriban: array.insert_at index parameter DoS bypasses LoopLimit and LimitToString](https://agentprime.io/advisories/GHSA-24c8-4792-22hx.md)
  `GHSA-24c8-4792-22hx`, `CVE-2026-74784` · NuGet `scriban` and 1 more: affected `<7.2.0`, fixed in `7.2.0` · CVSS 8.7 High · Not analysed yet · Published 19 May 2026 · Tags: Denial of service
- [ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.](https://agentprime.io/advisories/GHSA-533m-3wf6-c33v.md)
  `GHSA-533m-3wf6-c33v`, `CVE-2026-46559` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.13.1`, fixed in `14.13.1` · CVSS 4.0 Medium · Not analysed yet · Published 18 May 2026 · Tags: Memory corruption, CWE-193
- [ImageMagick: Stack overflow in fx operation](https://agentprime.io/advisories/GHSA-rcr6-g7jc-f57g.md)
  `GHSA-rcr6-g7jc-f57g`, `CVE-2026-46557` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.13.1`, fixed in `14.13.1` · CVSS 6.2 Medium · Not analysed yet · Published 18 May 2026 · Tags: Denial of service
- [ImageMagick: Use-After-Free in MSL decoder.](https://agentprime.io/advisories/GHSA-5r4x-w6p5-222q.md)
  `GHSA-5r4x-w6p5-222q`, `CVE-2026-46523` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.13.1`, fixed in `14.13.1` · CVSS 6.2 Medium · Not analysed yet · Published 18 May 2026 · Tags: Memory corruption
- [ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion](https://agentprime.io/advisories/GHSA-7gg8-qqx7-92g5.md)
  `GHSA-7gg8-qqx7-92g5`, `CVE-2026-46522` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.13.1`, fixed in `14.13.1` · CVSS 7.5 High · Not analysed yet · Published 18 May 2026 · Tags: Denial of service
- [ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression](https://agentprime.io/advisories/GHSA-jcqp-6r6f-3mfx.md)
  `GHSA-jcqp-6r6f-3mfx`, `CVE-2026-46521` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.13.1`, fixed in `14.13.1` · CVSS 5.5 Medium · Not analysed yet · Published 18 May 2026 · Tags: Memory corruption, Denial of service, CWE-252
- [ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions](https://agentprime.io/advisories/GHSA-36wm-hprc-mcf5.md)
  `GHSA-36wm-hprc-mcf5`, `CVE-2026-46520` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.13.1`, fixed in `14.13.1` · CVSS 7.5 High · Not analysed yet · Published 18 May 2026 · Tags: Memory corruption
- [ImageMagick: Policy Bypass in MNG coder could](https://agentprime.io/advisories/GHSA-g5mf-wqq5-vwg6.md)
  `GHSA-g5mf-wqq5-vwg6`, `CVE-2026-45664` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.13.1`, fixed in `14.13.1` · CVSS 5.3 Medium · Not analysed yet · Published 18 May 2026 · Tags: Denial of service
- [ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.](https://agentprime.io/advisories/GHSA-pfvh-m9xv-8966.md)
  `GHSA-pfvh-m9xv-8966`, `CVE-2026-45624` · NuGet `Magick.NET-Q16-AnyCPU` and 17 more: affected `<14.13.1`, fixed in `14.13.1` · CVSS 5.1 Medium · Not analysed yet · Published 18 May 2026 · Tags: Memory corruption, CWE-129

Newest: <https://agentprime.io/advisories/ecosystem/nuget.md>
Older: <https://agentprime.io/advisories/ecosystem/nuget.md?cursor=WyIyMDI2LTA1LTE4VDIwOjMzOjUyLjAwMDAwMFoiLCJHSFNBLXBmdmgtbTl4di04OTY2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?ecosystem=NuGet&cursor=WyIyMDI2LTA2LTI1VDIxOjQ5OjU5LjAwMDAwMFoiLCJHSFNBLWgzNmMtMzY2Ni1oNDg5Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/ecosystem/nuget/?cursor=WyIyMDI2LTA2LTI1VDIxOjQ5OjU5LjAwMDAwMFoiLCJHSFNBLWgzNmMtMzY2Ni1oNDg5Il0>. Everything for agents: <https://agentprime.io/llms.txt>.