# NuGet Advisories.

Every NuGet Advisory we hold (.NET), newest first.

## Records, newest first (an older page)

- [CliInvoke: Argument Injection in Extensibility Runner Factory](https://agentprime.io/advisories/GHSA-j73w-8hfr-4gc9.md)
  `GHSA-j73w-8hfr-4gc9`, `CVE-2026-100369` · NuGet `CliInvoke` and 1 more: affected `>=2.0.0, <2.8.5 || >=2.9.0, <2.9.4 || >=2.10.0, <2.10.5 || >=3.0.0-alpha.1, <3.0.0-beta.2`, fixed in `2.8.5`, `2.9.4`, `2.10.5`, `3.0.0-beta.2` · CVSS 8.4 High · Not analysed yet · Published 25 Sept 2026 · Tags: Command injection
- [MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers](https://agentprime.io/advisories/GHSA-7952-gx68-cjqr.md)
  `GHSA-7952-gx68-cjqr`, `CVE-2026-65829`, `PYSEC-2026-4108` · NuGet `MPXJ.Net` and 6 more: affected `>=7.3.0, <16.5.0`, fixed in `16.5.0` · CVSS 5.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MPXJ: XXE Vulnerability in MerlinReader](https://agentprime.io/advisories/GHSA-5vvx-3h34-f3gj.md)
  `GHSA-5vvx-3h34-f3gj`, `CVE-2026-61570`, `PYSEC-2026-4107` · Maven `net.sf.mpxj:mpxj` and 6 more: affected `>=5.5.5, <16.4.1`, fixed in `16.4.1` · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: XML external entities (XXE)
- [Steeltoe: Header-forwarded client cert lacks proof of private-key possession](https://agentprime.io/advisories/GHSA-5mq7-rwhj-4fh9.md)
  `GHSA-5mq7-rwhj-4fh9`, `CVE-2026-81868` · NuGet `Steeltoe.Security.Authorization.Certificate`: affected `<4.3.0`, fixed in `4.3.0` · CVSS 6.5 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)](https://agentprime.io/advisories/GHSA-67c9-f6v2-qv86.md)
  `GHSA-67c9-f6v2-qv86`, `CVE-2026-81516` · NuGet `Steeltoe.Discovery.Consul`: affected `>=4.0.0, <4.3.0`, fixed in `4.3.0` · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-755
- [Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)](https://agentprime.io/advisories/GHSA-hr73-3gpv-hh6q.md)
  `GHSA-hr73-3gpv-hh6q`, `CVE-2026-81515` · NuGet `Steeltoe.Discovery.Eureka`: affected `>=4.0.0, <4.3.0`, fixed in `4.3.0` · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-755
- [Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secrets](https://agentprime.io/advisories/GHSA-8phw-xrj9-cpqp.md)
  `GHSA-8phw-xrj9-cpqp`, `CVE-2026-75523` · NuGet `Steeltoe.Management.Endpoint`: affected `<4.3.0`, fixed in `4.3.0` · CVSS 5.9 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Information disclosure
- [SSH.NET: ScpClient allows server-side RCE via default SCP path handling](https://agentprime.io/advisories/GHSA-mggc-4xg6-vcxf.md)
  `GHSA-mggc-4xg6-vcxf`, `CVE-2026-85756` · NuGet `SSH.NET`: affected `<2026.0.0`, fixed in `2026.0.0` · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection
- [Umbraco: Delivery API leaks protected (Public Access) content through Content Picker / Multi-Node Tree Picker expansion](https://agentprime.io/advisories/GHSA-wr57-hqmp-fgvh.md)
  `GHSA-wr57-hqmp-fgvh`, `CVE-2026-69197` · NuGet `Umbraco.Cms`: affected `>=12.0.0, <13.15.1 || >=14.0.0-rc1, <17.5.3 || >=18.0.0, <18.0.2`, fixed in `13.15.1`, `17.5.3`, `18.0.2` · CVSS 8.7 High · Not analysed yet · Published 17 Sept 2026 · Tags: Information disclosure, Broken access control
- [Marten's LINQ provider has SQL injection via unescaped string literals](https://agentprime.io/advisories/GHSA-rfx3-98h7-v3xp.md)
  `GHSA-rfx3-98h7-v3xp`, `CVE-2026-75513` · NuGet `Marten`: affected `>=7.0.0, <9.13.0`, fixed in `9.13.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: SQL injection
- [OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS](https://agentprime.io/advisories/GHSA-v8pv-4842-x354.md)
  `GHSA-v8pv-4842-x354`, `CVE-2026-81192` · NuGet `OpenTelemetry.Resources.Host`: affected `<1.16.0-beta.2`, fixed in `1.16.0-beta.2` · CVSS 7.0 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-426
- [Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-8cp2-47hg-mfgh.md)
  `GHSA-8cp2-47hg-mfgh`, `BIT-aspnet-core-2026-69304`, `BIT-dotnet-2026-69304`, `BIT-dotnet-sdk-2026-69304`, `CVE-2026-69304` · NuGet `Microsoft.AspNetCore.Server.IISIntegration`: affected `>=8.0.0, <8.0.31 || >=9.0.0, <9.0.20 || >=10.0.0, <10.0.12 || >=11.0.0-preview.1, <11.0.0-rc.1`, fixed in `8.0.31`, `9.0.20`, `10.0.12`, `11.0.0-rc.1` · CVSS 5.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-409
- [Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-2j8r-3c22-8565.md)
  `GHSA-2j8r-3c22-8565`, `CVE-2026-69522` · NuGet `Microsoft.DiaSymReader.Native`: affected `>=17.10.0-beta1.24272.1, <18.9.0-beta1.26405.2`, fixed in `18.9.0-beta1.26405.2` · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability](https://agentprime.io/advisories/GHSA-527h-q9f6-p7qx.md)
  `GHSA-527h-q9f6-p7qx`, `BIT-dotnet-2026-69439`, `BIT-dotnet-sdk-2026-69439`, `CVE-2026-69439` · NuGet `Microsoft.DiaSymReader.Native`: affected `>=17.10.0-beta1.24272.1, <18.9.0-beta1.26405.2`, fixed in `18.9.0-beta1.26405.2` · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-63gh-g2x5-x69v.md)
  `GHSA-63gh-g2x5-x69v`, `BIT-dotnet-2026-71328`, `BIT-dotnet-sdk-2026-71328`, `CVE-2026-71328` · NuGet `Microsoft.DiaSymReader.Native`: affected `>=17.10.0-beta1.24272.1, <18.9.0-beta1.26405.2`, fixed in `18.9.0-beta1.26405.2` · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-gh2h-rhph-h37g.md)
  `GHSA-gh2h-rhph-h37g`, `BIT-dotnet-2026-50646`, `BIT-dotnet-sdk-2026-50646`, `CVE-2026-50646` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-x64` and 2 more: affected `>=8.0.0, <8.0.29 || >=9.0.0, <9.0.18 || >=10.0.0, <10.0.10`, fixed in `8.0.29`, `9.0.18`, `10.0.10` · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Insecure deserialization, CWE-693
- [Microsoft QUIC: Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-92f5-vc22-8j33.md)
  `GHSA-92f5-vc22-8j33`, `CVE-2026-62815` · NuGet `Microsoft.Native.Quic.MsQuic.OpenSSL` and 1 more: affected `<2.4.19 || >=2.5.3, <2.5.10`, fixed in `2.4.19`, `2.5.10` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-62900 – .NET Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-23fw-v26w-5fgq.md)
  `GHSA-23fw-v26w-5fgq`, `BIT-dotnet-2026-62900`, `BIT-dotnet-sdk-2026-62900`, `CVE-2026-62900` · NuGet `Microsoft.Build.Tasks.Git` and 1 more: affected `>=10.0.102, <10.0.111 || >=10.0.200, <=10.0.204 || >=10.0.300, <10.0.303`, fixed in `10.0.111`, `10.0.303` · CVSS 5.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-212
- [Duplicate Advisory: Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-4qhr-qf46-fcrx.md)
  `GHSA-4qhr-qf46-fcrx` · NuGet `Microsoft.DiaSymReader.Native`: affected `>=17.10.0-beta1.24272.1, <18.9.0-beta1.26405.2`, fixed in `18.9.0-beta1.26405.2` · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Duplicate Advisory: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-q72m-f2r4-w4cw.md)
  `GHSA-q72m-f2r4-w4cw` · NuGet `Microsoft.DiaSymReader.Native`: affected `>=17.10.0-beta1.24272.1, <18.9.0-beta1.26405.2`, fixed in `18.9.0-beta1.26405.2` · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Duplicate Advisory: Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability](https://agentprime.io/advisories/GHSA-mqvm-gmc4-6rv2.md)
  `GHSA-mqvm-gmc4-6rv2` · NuGet `Microsoft.DiaSymReader.Native`: affected `>=17.10.0-beta1.24272.1, <18.9.0-beta1.26405.2`, fixed in `18.9.0-beta1.26405.2` · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Duplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-v3f6-m9j2-437p.md)
  `GHSA-v3f6-m9j2-437p` · NuGet `Microsoft.AspNetCore.Server.IISIntegration`: affected `>=8.0.0, <8.0.31 || >=9.0.0, <9.0.20 || >=10.0.0, <10.0.12 || >=11.0.0-preview.1, <11.0.0-rc.1`, fixed in `8.0.31`, `9.0.20`, `10.0.12`, `11.0.0-rc.1` · CVSS 5.9 Medium · Withdrawn · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-409
- [ImageMagick: Memory Leak when providing invalid options to the cli](https://agentprime.io/advisories/GHSA-cvhv-g4rq-3hmw.md)
  `GHSA-cvhv-g4rq-3hmw`, `CVE-2026-66011` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 4.8 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Denial of service
- [SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)](https://agentprime.io/advisories/GHSA-pfvm-w89x-94jw.md)
  `GHSA-pfvm-w89x-94jw` · NuGet `SIPSorcery`: affected `>=10.0.5, <10.0.14`, fixed in `10.0.14` · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-248, CWE-755
- [SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing](https://agentprime.io/advisories/GHSA-jwjp-4649-v8jp.md)
  `GHSA-jwjp-4649-v8jp` · NuGet `SIPSorcery`: affected `<10.0.14`, fixed in `10.0.14` · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Memory corruption, CWE-755
- [SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames](https://agentprime.io/advisories/GHSA-q939-rpr3-3284.md)
  `GHSA-q939-rpr3-3284`, `CVE-2026-48798` · NuGet `SSH.NET`: affected `<2026.0.0`, fixed in `2026.0.0` · CVSS 7.1 High · Not analysed yet · Published 12 Aug 2026 · Tags: Path traversal
- [Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-9mrh-pw7c-9mqm.md)
  `GHSA-9mrh-pw7c-9mqm`, `BIT-dotnet-2026-62902`, `BIT-dotnet-sdk-2026-62902`, `CVE-2026-62902` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11`, fixed in `8.0.30`, `9.0.19`, `10.0.11` · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Server-side request forgery (SSRF), CWE-693, CWE-829
- [Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/GHSA-vg44-h755-9hw7.md)
  `GHSA-vg44-h755-9hw7`, `BIT-dotnet-2026-62871`, `BIT-dotnet-sdk-2026-62871`, `CVE-2026-62871` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11`, fixed in `8.0.30`, `9.0.19`, `10.0.11` · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-fx4q-gjrx-2jw6.md)
  `GHSA-fx4q-gjrx-2jw6`, `BIT-dotnet-2026-62897`, `BIT-dotnet-sdk-2026-62897`, `CVE-2026-62897` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11`, fixed in `8.0.30`, `9.0.19`, `10.0.11` · CVSS 7.0 High · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-gg8c-3338-xw2f.md)
  `GHSA-gg8c-3338-xw2f`, `BIT-dotnet-2026-70354`, `BIT-dotnet-sdk-2026-70354`, `CVE-2026-70354` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11`, fixed in `8.0.30`, `9.0.19`, `10.0.11` · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/GHSA-9mr8-pwpw-3j2w.md)
  `GHSA-9mr8-pwpw-3j2w`, `BIT-dotnet-2026-62909`, `BIT-dotnet-sdk-2026-62909`, `CVE-2026-62909` · NuGet `Microsoft.NETCore.App.Runtime.linux-arm` and 7 more: affected `>=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11`, fixed in `8.0.30`, `9.0.19`, `10.0.11` · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-248, CWE-252
- [Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/GHSA-jqhp-238x-qhgf.md)
  `GHSA-jqhp-238x-qhgf`, `BIT-dotnet-2026-62886`, `BIT-dotnet-sdk-2026-62886`, `CVE-2026-62886` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11`, fixed in `8.0.30`, `9.0.19`, `10.0.11` · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-m93f-wj8c-rp8p.md)
  `GHSA-m93f-wj8c-rp8p`, `BIT-dotnet-2026-62901`, `BIT-dotnet-sdk-2026-62901`, `CVE-2026-62901` · NuGet `Microsoft.NETCore.App.Runtime.win-arm64` and 10 more: affected `>=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11`, fixed in `8.0.30`, `9.0.19`, `10.0.11` · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-606
- [Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability](https://agentprime.io/advisories/GHSA-r6mh-95jw-g7qg.md)
  `GHSA-r6mh-95jw-g7qg`, `BIT-dotnet-2026-62899`, `BIT-dotnet-sdk-2026-62899`, `CVE-2026-62899` · NuGet `Microsoft.NETCore.App.Runtime.linux-arm` and 7 more: affected `>=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11`, fixed in `8.0.30`, `9.0.19`, `10.0.11` · CVSS 5.9 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: HTTP request smuggling
- [Duplicate Advisory: Microsoft QUIC Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-2q33-cf8w-7q23.md)
  `GHSA-2q33-cf8w-7q23` · NuGet `Microsoft.Native.Quic.MsQuic.OpenSSL`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Withdrawn · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption
- [Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-c494-m2fq-59mx.md)
  `GHSA-c494-m2fq-59mx`, `BIT-dotnet-2026-62898`, `BIT-dotnet-sdk-2026-62898`, `CVE-2026-62898` · NuGet `Microsoft.NETCore.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11`, fixed in `8.0.30`, `9.0.19`, `10.0.11` · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption
- [ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow](https://agentprime.io/advisories/GHSA-pjxj-pchx-4c3m.md)
  `GHSA-pjxj-pchx-4c3m`, `CVE-2026-53466` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 6.5 Medium · Not analysed yet · Published 31 Jul 2026 · Tags: Memory corruption, CWE-681
- [Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability](https://agentprime.io/advisories/GHSA-6588-8gv4-xfgh.md)
  `GHSA-6588-8gv4-xfgh`, `BIT-dotnet-2026-32203`, `BIT-dotnet-sdk-2026-32203`, `CVE-2026-32203` · NuGet `System.Security.Cryptography.Xml`: affected `>=8.0.0, <8.0.3 || >=9.0.0, <9.0.15 || >=10.0.0, <10.0.6`, fixed in `8.0.3`, `9.0.15`, `10.0.6` · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: Memory corruption, CWE-20
- [SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)](https://agentprime.io/advisories/GHSA-28gm-jrmw-xx93.md)
  `GHSA-28gm-jrmw-xx93`, `CVE-2026-54632` · NuGet `SIPSorcery`: affected `<10.0.9`, fixed in `10.0.9` · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-20, CWE-755
- [AWS CDK CodeBuild S3 Log Encryption Boolean Inversion](https://agentprime.io/advisories/GHSA-464c-974j-9xm6.md)
  `GHSA-464c-974j-9xm6`, `GO-2026-6093` · npm `aws-cdk-lib` and 9 more: affected `<2.253.0`, fixed in `2.253.0` · CVSS 3.3 Low · Not analysed yet · Published 24 Jul 2026 · Tags: Weak cryptography or TLS, CWE-682
- [ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds](https://agentprime.io/advisories/GHSA-h22j-f9xw-xjjm.md)
  `GHSA-h22j-f9xw-xjjm`, `CVE-2026-62946` · NuGet `Magick.NET-Q16-AnyCPU` and 5 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 5.1 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Memory corruption
- [ImageMagick: Heap Buffer Over-Write in fx operation](https://agentprime.io/advisories/GHSA-422r-8c97-xcg4.md)
  `GHSA-422r-8c97-xcg4`, `CVE-2026-62363` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 5.0 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Memory corruption
- [ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided](https://agentprime.io/advisories/GHSA-f5m7-cqgw-8hm7.md)
  `GHSA-f5m7-cqgw-8hm7`, `CVE-2026-62343` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 4.7 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Memory corruption
- [Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)](https://agentprime.io/advisories/GHSA-p5rm-jg5c-8c77.md)
  `GHSA-p5rm-jg5c-8c77`, `CVE-2026-73851` · NuGet `Microsoft.OpenApi.Kiota`: affected `<1.29.1 || >=1.30.0, <1.34.0`, fixed in `1.29.1`, `1.34.0` · CVSS 6.1 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Path traversal, CWE-829
- [Microsoft Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName](https://agentprime.io/advisories/GHSA-4vv7-jj25-4gh6.md)
  `GHSA-4vv7-jj25-4gh6`, `CVE-2026-59866` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.5`, fixed in `1.29.1`, `1.32.5` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jul 2026 · Tags: Path traversal, Code injection
- [Microsoft Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by \`kiota info\`](https://agentprime.io/advisories/GHSA-hq9q-27g5-qwpj.md)
  `GHSA-hq9q-27g5-qwpj`, `CVE-2026-59865` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.5`, fixed in `1.29.1`, `1.32.5` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jul 2026 · Tags: Code injection, CWE-829
- [Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF](https://agentprime.io/advisories/GHSA-4rj6-vrwv-wr8m.md)
  `GHSA-4rj6-vrwv-wr8m`, `CVE-2026-59863` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.5`, fixed in `1.29.1`, `1.32.5` · CVSS 7.0 High · Not analysed yet · Published 24 Jul 2026 · Tags: Path traversal, Server-side request forgery (SSRF), CWE-829
- [Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref](https://agentprime.io/advisories/GHSA-rg4h-fpcp-2qm8.md)
  `GHSA-rg4h-fpcp-2qm8`, `CVE-2026-59867` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.5`, fixed in `1.29.1`, `1.32.5` · CVSS 7.1 High · Not analysed yet · Published 24 Jul 2026 · Tags: Path traversal, Server-side request forgery (SSRF), CWE-829
- [Microsoft Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-\* extensions](https://agentprime.io/advisories/GHSA-4jwf-m4wg-8p66.md)
  `GHSA-4jwf-m4wg-8p66`, `CVE-2026-59864` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.5`, fixed in `1.29.1`, `1.32.5` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jul 2026 · Tags: Path traversal, CWE-829
- [Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator](https://agentprime.io/advisories/GHSA-jqwh-526h-c92j.md)
  `GHSA-jqwh-526h-c92j`, `CVE-2026-59859` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.4`, fixed in `1.29.1`, `1.32.4` · CVSS 8.7 High · Not analysed yet · Published 24 Jul 2026 · Tags: Code injection
- [Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator](https://agentprime.io/advisories/GHSA-7f3j-j7jj-r3vr.md)
  `GHSA-7f3j-j7jj-r3vr`, `CVE-2026-59862` · NuGet `Microsoft.OpenAPI.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.0`, fixed in `1.29.1`, `1.32.0` · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2026 · Tags: Code injection
- [Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator](https://agentprime.io/advisories/GHSA-xg2h-5xr2-29jw.md)
  `GHSA-xg2h-5xr2-29jw`, `CVE-2026-59861` · NuGet `Microsoft.OpenAPI.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.0`, fixed in `1.29.1`, `1.32.0` · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2026 · Tags: Code injection
- [ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title](https://agentprime.io/advisories/GHSA-76q6-2p6h-xjqr.md)
  `GHSA-76q6-2p6h-xjqr`, `CVE-2026-61464` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 1.0 Low · Not analysed yet · Published 24 Jul 2026 · Tags: Memory corruption
- [Microsoft Kiota: XML Doc-Comment Newline Breakout Code Injection](https://agentprime.io/advisories/GHSA-3hrf-2gc2-mx32.md)
  `GHSA-3hrf-2gc2-mx32`, `CVE-2026-59860` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.3`, fixed in `1.29.1`, `1.32.3` · CVSS 8.7 High · Not analysed yet · Published 24 Jul 2026 · Tags: Code injection
- [ImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified](https://agentprime.io/advisories/GHSA-h5r4-w88w-7ccr.md)
  `GHSA-h5r4-w88w-7ccr`, `CVE-2026-61872` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 2.0 Low · Not analysed yet · Published 24 Jul 2026 · Tags: Denial of service
- [ImageMagick: Memory Leak in ICON decoder when allocation fails](https://agentprime.io/advisories/GHSA-h58x-r7f7-rh84.md)
  `GHSA-h58x-r7f7-rh84`, `CVE-2026-61871` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 6.3 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Denial of service
- [ImageMagick: Memory leak in VIFF encoder when allocation fails](https://agentprime.io/advisories/GHSA-m596-67p7-69wh.md)
  `GHSA-m596-67p7-69wh`, `CVE-2026-61870` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 2.1 Low · Not analysed yet · Published 24 Jul 2026 · Tags: Denial of service
- [ImageMagick: Memory Leak in MIFF encoder when allocaton fails](https://agentprime.io/advisories/GHSA-r628-69v2-2f9c.md)
  `GHSA-r628-69v2-2f9c`, `CVE-2026-61869` · NuGet `Magick.NET-Q16-arm64` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 2.1 Low · Not analysed yet · Published 24 Jul 2026 · Tags: Denial of service
- [ImageMagick: Memory Leak in YUV decoder when opening of blob fails](https://agentprime.io/advisories/GHSA-h7f2-f9cc-h2gv.md)
  `GHSA-h7f2-f9cc-h2gv`, `CVE-2026-61868` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 6.3 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Denial of service
- [ImageMagick: Memory Leak in TIFF encoder when an allocation fails](https://agentprime.io/advisories/GHSA-jfq9-q63x-rc63.md)
  `GHSA-jfq9-q63x-rc63`, `CVE-2026-61867` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.15.0`, fixed in `14.15.0` · CVSS 2.1 Low · Not analysed yet · Published 24 Jul 2026 · Tags: Denial of service

Newest: <https://agentprime.io/advisories/ecosystem/nuget.md>
Older: <https://agentprime.io/advisories/ecosystem/nuget.md?cursor=WyIyMDI2LTA3LTI0VDE0OjM1OjQ1LjAwMDAwMFoiLCJHSFNBLWpmcTktcTYzeC1yYzYzIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?ecosystem=NuGet&cursor=WyIyMDI2LTA5LTI1VDIxOjQxOjQ4LjAwMDAwMFoiLCJHSFNBLXdydnctMjU0ci13cG12Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/ecosystem/nuget/?cursor=WyIyMDI2LTA5LTI1VDIxOjQxOjQ4LjAwMDAwMFoiLCJHSFNBLXdydnctMjU0ci13cG12Il0>. Everything for agents: <https://agentprime.io/llms.txt>.