Advisories · .NET

NuGet Advisories.

Every NuGet Advisory we hold, newest first.

Microsoft.DotNet.ILCompiler +76 NuGet

CVSS 8.1 High

Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability
- Memory corruption
>=8.0.0, <8.0.33 || >=9.0.0, <9.0.22 || >=10.0.0, <10.0.14 || >=11.0.0-preview.1.26104.118, <11.0.0-rc.3.26522.148 · fixed in 8.0.33, 9.0.22, 10.0.14, 11.0.0-rc.3.26522.148

GHSA-p3jp-9v83-76w9 Not analysed yet 3 Nov 2026
Metalama.Framework NuGet

CVSS 7.3 High

Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution
- Insecure deserialization
- CWE-913
<2025.1.18 || >=2026.0.1-preview, <2026.0.25 || >=2026.1.0-preview, <2026.1.19 · fixed in 2025.1.18, 2026.0.25, 2026.1.19

GHSA-h26j-4vp7-x9w2 · CVE-2026-62848 Not analysed yet 3 Nov 2026
MySqlConnector NuGet

CVSS 4.0, no score published

MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)
- Information disclosure
<2.6.1 · fixed in 2.6.1

GHSA-473q-m89c-ghf8 Not analysed yet 28 Oct 2026
tinymce +2 npm

CVSS 8.5 High

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization
- Cross-site scripting (XSS)
>=7.9.3, <7.9.4 || >=8.5.1, <8.9.3 · fixed in 7.9.4, 8.9.3

GHSA-mf2p-h6hf-fcwm · CVE-2026-116675 Not analysed yet 27 Oct 2026
MessagePack NuGet

CVSS 5.3 Medium

MessagePack: Nested arrays can blow past buffer length limits
- CWE-1325
<2.5.303 || >=3.0.0, <3.1.9 · fixed in 2.5.303, 3.1.9

GHSA-qhrr-8q5h-9q3h · CVE-2026-92707 Not analysed yet 15 Oct 2026
Microsoft.OpenApi.Readers +1 NuGet

CVSS 7.5 High

Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion
- Denial of service
<1.6.30 · fixed in 1.6.30

GHSA-7pxr-59rr-hqj2 · CVE-2026-72923 Not analysed yet 14 Oct 2026
Metalama.Framework +1 NuGet

CVSS 8.2 High

Metalama allows local code execution through DLL planting in shared temporary directories
- CWE-377
- CWE-427
<2025.1.18 || >=2026.0.0-preview, <2026.0.25 || >=2026.1.0-preview, <2026.1.19 · fixed in 2025.1.18, 2026.0.25, 2026.1.19

GHSA-m6wq-39m7-9xpp · CVE-2026-62847 Not analysed yet 14 Oct 2026
Microsoft.WindowsDesktop.App.Runtime.win-arm64 +2 NuGet

CVSS 8.8 High

Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability
- Insecure deserialization
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-4j9v-h7pp-725h · CVE-2026-70035 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.App.Runtime.linux-arm +10 NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 · fixed in 8.0.32, 9.0.21, 10.0.13

GHSA-mf4x-w4gh-4656 · CVE-2026-70186 Not analysed yet 13 Oct 2026
Microsoft.WindowsDesktop.App.Runtime.win-arm64 +2 NuGet

CVSS 8.8 High

Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability
- Memory corruption
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-pfwj-2f93-rf42 · CVE-2026-70007 Not analysed yet 13 Oct 2026
Microsoft.WindowsDesktop.App.Runtime.win-arm64 +2 NuGet

CVSS 8.8 High

Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability
- Insecure deserialization
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-c27m-942f-rcfh · CVE-2026-87697 Not analysed yet 13 Oct 2026
Microsoft.NETCore.App.Runtime.linux-arm +7 NuGet

CVSS 7.8 High

Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability
- Path traversal
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-w6wh-p4g7-mpj2 · CVE-2026-96225 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.Components.WebAssembly.Server NuGet

CVSS 8.8 High

Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability
- Cross-site scripting (XSS)
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-qjpx-jqm5-h2c4 · CVE-2026-96230 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.Authentication.Negotiate NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege Vulnerability
- Authentication bypass
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 · fixed in 8.0.32, 9.0.21, 10.0.13

GHSA-vrrp-6v32-2p8g · CVE-2026-70179 Not analysed yet 13 Oct 2026
Microsoft.WindowsDesktop.App.Runtime.win-arm64 +2 NuGet

CVSS 8.8 High

Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability
- Memory corruption
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-xq57-crx4-g373 · CVE-2026-96224 Not analysed yet 13 Oct 2026
Microsoft.WindowsDesktop.App.Runtime.win-arm64 +2 NuGet

CVSS 8.8 High

Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability
- Memory corruption
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-f63g-mx39-3r38 · CVE-2026-85363 Not analysed yet 13 Oct 2026
System.Security.Cryptography.Xml NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.5 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.5, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-c399-9853-6jmj · CVE-2026-96959 Not analysed yet 13 Oct 2026
Microsoft.WindowsDesktop.App.Runtime.win-arm64 +2 NuGet

CVSS 8.8 High

Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability
- Insecure deserialization
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-4w5f-7jp2-w48g · CVE-2026-83520 Not analysed yet 13 Oct 2026
Microsoft.WindowsDesktop.App.Runtime.win-arm64 +2 NuGet

CVSS 8.8 High

Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability
- CWE-358
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-f749-vhgx-39h6 · CVE-2026-70174 Not analysed yet 13 Oct 2026
Microsoft.WindowsDesktop.App.Runtime.win-arm64 +2 NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure Vulnerability
- Memory corruption
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-f8qh-mqg4-9939 · CVE-2026-96232 Not analysed yet 13 Oct 2026
Microsoft.WindowsDesktop.App.Runtime.win-arm64 +2 NuGet

CVSS 5.3 Medium

Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure Vulnerability
- CWE-346
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-fq6x-pvr9-888r · CVE-2026-96234 Not analysed yet 13 Oct 2026
Microsoft.WindowsDesktop.App.Runtime.win-arm64 +2 NuGet

CVSS 6.5 Medium

Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability
- CWE-183
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-5qr9-xxm9-6cmq · CVE-2026-96229 Not analysed yet 13 Oct 2026
Microsoft.WindowsDesktop.App.Runtime.win-arm64 +2 NuGet

CVSS 8.8 High

Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability
- Memory corruption
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-g44w-h65v-4cw9 · CVE-2026-96235 Not analysed yet 13 Oct 2026
System.Security.Cryptography.Xml NuGet

CVSS 7.4 High

Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability
- Weak cryptography or TLS
>=8.0.0, <8.0.5 · fixed in 8.0.5

GHSA-vrv5-2jg9-4mmr · CVE-2026-96222 Not analysed yet 13 Oct 2026
Microsoft.NETCore.App.Runtime.linux-arm +7 NuGet

CVSS 7.8 High

Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability
- Path traversal
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-2j93-m82w-73j2 · CVE-2026-96231 Not analysed yet 13 Oct 2026
Microsoft.Native.Quic.MsQuic.Schannel NuGet

CVSS 5.9 Medium

Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability
- Memory corruption
>=1.9.0, <2.5.12 || >=2.6.0, <2.6.3 · fixed in 2.5.12, 2.6.3

GHSA-2mxg-prvg-9jfg · CVE-2026-85790 Not analysed yet 13 Oct 2026
Microsoft.NETCore.App.Runtime.linux-arm +10 NuGet

CVSS 5.9 Medium

Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability
- Information disclosure
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-wxxw-5cvc-53j7 · CVE-2026-66822 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.App.Runtime.linux-arm +10 NuGet

CVSS 9.4 CriticalCritical · CVSS 9+

Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability
- HTTP request smuggling
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-rv87-ccxw-8ggf · CVE-2026-88092 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.App.Runtime.linux-arm +10 NuGet

CVSS 9.1 CriticalCritical · CVSS 9+

Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability
- HTTP request smuggling
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-fpq8-4vhr-rcxx · CVE-2026-70188 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.App.Runtime.linux-arm +10 NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-f4g7-52wc-p8x7 · CVE-2026-96236 Not analysed yet 13 Oct 2026
Microsoft.NETCore.App.Runtime.win-arm64 +2 NuGet

CVSS 8.1 High

Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability
- Memory corruption
>=8.0.0, <8.0.33 || >=9.0.0, <9.0.22 || >=10.0.0, <10.0.14 || >=11.0.0-preview.1, <11.0.0-rc.3.26522.148 · fixed in 8.0.33, 9.0.22, 10.0.14, 11.0.0-rc.3.26522.148

GHSA-4mpw-cpwj-hxxj · CVE-2026-70197 Not analysed yet 13 Oct 2026
Microsoft.NETCore.App.Runtime.linux-arm +10 NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-3rxq-g8rj-r2cf · CVE-2026-69651 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.Components.WebAssembly.Server NuGet

CVSS 8.8 High

Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability
- Code injection
>=10.0.0, <10.0.14 || >=11.0.0-preview.1, <11.0.0-rc.3.26522.148 · fixed in 10.0.14, 11.0.0-rc.3.26522.148

GHSA-g27p-qf6j-c96c · CVE-2026-102870 Not analysed yet 13 Oct 2026
System.Security.Cryptography.Xml NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability
- CWE-405
>=8.0.0, <8.0.5 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.5, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-7hqp-7c5m-4vq6 · CVE-2026-96960 Not analysed yet 13 Oct 2026
Microsoft.NETCore.App.Runtime.linux-arm +11 NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability
- Memory corruption
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-87vj-4hqv-22p9 · CVE-2026-96233 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.SignalR.Protocols.MessagePack NuGet

CVSS 5.3 Medium

Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability
- CWE-1325
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.5, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-86xp-94pg-8r6r Not analysed yet 13 Oct 2026
System.Security.Cryptography.Pkcs NuGet

CVSS 5.9 Medium

Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability
- CWE-405
>=8.0.0, <8.0.2 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.2, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-2fmv-rv2c-59x7 · CVE-2026-70162 Not analysed yet 13 Oct 2026
System.Security.Cryptography.Xml NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.5 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.5, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-r955-8q5j-3h83 · CVE-2026-96958 Not analysed yet 13 Oct 2026
System.Security.Cryptography.Pkcs NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-84008 - .NET Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.2 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.2, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-846f-f764-76mx · CVE-2026-84008 Not analysed yet 13 Oct 2026
Microsoft.NETCore.App.Runtime.linux-arm +11 NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-mc4q-93x5-f6hj · CVE-2026-58280 Not analysed yet 13 Oct 2026
Microsoft.NETCore.App.Runtime.linux-arm +7 NuGet

CVSS 6.5 Medium

Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability
- Weak cryptography or TLS
>=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 11.0.0-rc.2

GHSA-fqpq-cx42-9jmm · CVE-2026-70194 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.App.Runtime.linux-arm +11 NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability
- Race condition
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-494h-xx7x-5frh · CVE-2026-70183 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.App.Runtime.linux-arm +11 NuGet

CVSS 5.9 Medium

Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 · fixed in 8.0.32, 9.0.21, 10.0.13

GHSA-57xr-hfxx-jw5x · CVE-2026-70196 Not analysed yet 13 Oct 2026
Microsoft.Native.Quic.MsQuic.Schannel NuGet

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability
- Memory corruption
>=2.5.11-ci.156755675, <2.5.11-ci.159417053 · fixed in 2.5.11-ci.159417053

GHSA-5gjq-3f94-rcf7 · CVE-2026-105016 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.App.Runtime.linux-arm +11 NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 · fixed in 8.0.32, 9.0.21, 10.0.13

GHSA-w5qq-qrpp-rf4c · CVE-2026-70181 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.App.Runtime.linux-arm +11 NuGet

CVSS 8.1 High

Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability
- CWE-640
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 · fixed in 8.0.32, 9.0.21, 10.0.13

GHSA-x3vp-85cm-q97r · CVE-2026-70175 Not analysed yet 13 Oct 2026
Microsoft.AspNetCore.SignalR.Common NuGet

CVSS 7.5 High

Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service Vulnerability
- Denial of service
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.5, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2

GHSA-334f-vvp4-7g6p · CVE-2026-70159 Not analysed yet 13 Oct 2026
SixLabors.ImageSharp NuGet

CVSS 7.5 High

ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer
- Memory corruption
>=2.1.0, <3.2.0 || >=4.0.0, <4.1.2 · fixed in 3.2.0, 4.1.2

GHSA-jjfr-hcj7-qf5w · CVE-2026-106115 Not analysed yet 7 Oct 2026
SixLabors.ImageSharp NuGet

CVSS 5.9 Medium

ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate
- CWE-226
>=4.0.0, <4.1.2 · fixed in 4.1.2

GHSA-4q3p-rj5x-xv7p · CVE-2026-106111 Not analysed yet 7 Oct 2026
SixLabors.ImageSharp NuGet

CVSS 7.5 High

ImageSharp: ICC LUT16 output channel count can write beyond Vector4
- Memory corruption
>=4.0.0, <4.1.2 · fixed in 4.1.2

GHSA-ffp7-56pq-64mr · CVE-2026-106112 Not analysed yet 7 Oct 2026
SixLabors.ImageSharp NuGet

CVSS 5.3 Medium

ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop
- Denial of service
>=2.0.0, <3.2.0 || >=4.0.0, <4.1.2 · fixed in 3.2.0, 4.1.2

GHSA-wmxv-xphr-5c9g · CVE-2026-106116 Not analysed yet 7 Oct 2026
SixLabors.ImageSharp NuGet

CVSS 7.5 High

ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer
- Memory corruption
>=2.0.0, <3.2.0 || >=4.0.0, <4.1.2 · fixed in 3.2.0, 4.1.2

GHSA-j9gm-c75j-xc9q · CVE-2026-106110 Not analysed yet 7 Oct 2026
SixLabors.ImageSharp NuGet

CVSS 7.5 High

ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index
- Memory corruption
>=2.0.0, <3.2.0 || >=4.0.0, <4.1.2 · fixed in 3.2.0, 4.1.2

GHSA-j3p4-wp97-rph4 · CVE-2026-106113 Not analysed yet 7 Oct 2026
SixLabors.ImageSharp NuGet

CVSS 5.3 Medium

ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions
- Denial of service
>=1.0.0-beta0001, <3.2.0 || >=4.0.0, <4.1.2 · fixed in 3.2.0, 4.1.2

GHSA-gwg2-r3hj-4w44 · CVE-2026-106114 Not analysed yet 7 Oct 2026
SixLabors.ImageSharp NuGet

CVSS 7.5 High

ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write
- Memory corruption
>=3.0.0, <3.2.0 || >=4.0.0, <4.1.1 · fixed in 3.2.0, 4.1.1

GHSA-v76p-62qx-wwq2 · CVE-2026-106118 Not analysed yet 7 Oct 2026
ImageSharp NuGet

CVSS 7.5 High

ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp
- Memory corruption
>=3.0.0, <3.2.0 || >=4.0.0, <4.1.1 · fixed in 3.2.0, 4.1.1

GHSA-jj3q-cwqj-842r · CVE-2026-106117 Not analysed yet 7 Oct 2026
Microsoft.OpenApi.Kiota +1 NuGet

CVSS 3.1 Low

Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
- Path traversal
>=1.25.1, <1.35.0 · fixed in 1.35.0

GHSA-6gw6-rv2g-25mg · CVE-2026-105795 Not analysed yet 6 Oct 2026
Microsoft.OpenApi.Kiota +1 NuGet

CVSS 8.8 High

Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators
- Code injection
>=0.5.0, <1.35.0 · fixed in 1.35.0

GHSA-rm89-rhwj-9j92 · CVE-2026-105796 Not analysed yet 6 Oct 2026
Microsoft.Native.Quic.MsQuic.OpenSSL NuGet

CVSS 9.1 CriticalCritical · CVSS 9+

MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL
- Weak cryptography or TLS
<2.4.20 || >=2.5.0, <2.5.11 || >=2.6.0, <2.6.1 · fixed in 2.4.20, 2.5.11, 2.6.1

GHSA-w5f4-fx9m-m4q7 · CVE-2026-105794 Not analysed yet 6 Oct 2026
AlastairLundy.CliInvoke.Specializations +1 NuGet

CVSS 8.4 High

CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers
- Command injection
>=1.0.0-rc.1, <2.0.2 · fixed in 2.0.2

GHSA-wrvw-254r-wpmv · CVE-2026-100368 Not analysed yet 25 Sept 2026