NuGet Advisories.

Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section

• Cross-site scripting (XSS)

>=14.0.0, <14.3.1 · fixed in 14.3.1

Security Update for the OPC UA .NET Standard Stack

• Denial of service

<1.5.374.118 · fixed in 1.5.374.118

Security Update for the OPC UA .NET Standard Stack

• Denial of service

<1.05.374.54 · fixed in 1.05.374.54

MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow

• Weak cryptography or TLS

<2.5.187 || >=2.6.95-alpha, <3.0.214-rc.1 · fixed in 2.5.187, 3.0.214-rc.1

Microsoft Security Advisory CVE-2024-43485 | .NET Denial of Service Vulnerability

• Denial of service

>=6.0.0, <6.0.10 || >=8.0.0, <8.0.5 · fixed in 6.0.10, 8.0.5

Microsoft Security Advisory CVE-2024-43484 | .NET Denial of Service Vulnerability

• Denial of service

>=6.0.0-preview.1.21102.12, <6.0.1 || >=8.0.0-preview.1.23110.8, <8.0.1 || >=9.0.0-preview.1.24080.9, <9.0.0-rc.2.24473.5 · fixed in 6.0.1, 8.0.1, 9.0.0-rc.2.24473.5

Microsoft Security Advisory CVE-2024-43483 | .NET Denial of Service Vulnerability

• Denial of service

>=6.0.0-preview.1.21102.12, <6.0.2 || >=8.0.0-preview.1.23110.8, <8.0.1 || >=9.0.0-preview.1.24080.9, <9.0.0-rc.2.24473.5 · fixed in 6.0.2, 8.0.1, 9.0.0-rc.2.24473.5

Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability

• Race condition
• Memory corruption

>=8.0.0, <8.0.10 || >=9.0.0-preview.1.24081.5, <9.0.0-rc.2.24474.3 · fixed in 8.0.10, 9.0.0-rc.2.24474.3

CRLF Injection in RestSharp's `RestRequest.AddHeader` method

• Other injection

>=107.0.0-preview.1, <112.0.0 · fixed in 112.0.0

Serilog Client IP Spoofing vulnerability

• Cross-site scripting (XSS)
• CWE-348

<2.1.0 · fixed in 2.1.0

Umbraco CMS Improper Access Control vulnerability

• Broken access control

>=14.0.0, <14.1.2 · fixed in 14.1.2

Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information

• Information disclosure

>=14.0.0, <14.1.2 · fixed in 14.1.2

Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability

• Denial of service

>=8.0.0, <8.0.8 · fixed in 8.0.8

Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability

• Weak cryptography or TLS

>=8.0.0, <8.0.8 · fixed in 8.0.8

IdentityServer Open Redirect vulnerability

• Open redirect

<=4.1.2 · no fixed version yet

IdentityServer Open Redirect vulnerability

• Open redirect

>=6.0.0-preview.1, <6.0.5 || >=6.1.0-preview.1, <6.1.8 || >=6.2.0-preview.1, <6.2.5 || >=6.3.0-preview.1, <6.3.10 || >=7.0.0-preview.1, <7.0.6 · fixed in 6.0.5, 6.1.8, 6.2.5, 6.3.10, 7.0.6

tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users

• Path traversal

>=4.0.0, <6.8.0 · fixed in 6.8.0

CLSA Directory Traversal vulnerability

• Path traversal

<5.5.4 || >=6.0.0, <8.0.0 || >=7.0.0, <8.0.0 · fixed in 5.5.4, 8.0.0

SixLabors ImageSharp has Excessive Memory Allocation in Gif Decoder

• Denial of service

<2.1.9 || >=3.0.0, <3.1.5 · fixed in 2.1.9, 3.1.5

SixLabors ImageSharp Out-of-bounds Write

• Memory corruption

<2.1.9 || >=3.0.0, <3.1.5 · fixed in 2.1.9, 3.1.5

Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error

• Information disclosure

<=2.5.5 · no fixed version yet

Withdrawn Advisory: Bootstrap Cross-Site Scripting (XSS) vulnerability

• Cross-site scripting (XSS)

>=4.0.0, <5.0.0 · fixed in 5.0.0

Withdrawn Advisory: Bootstrap Cross-Site Scripting (XSS) vulnerability

• Cross-site scripting (XSS)

>=2.0.0, <=3.4.1 · no fixed version yet

Mimekit has vulnerable dependency that can lead to denial of service

• CWE-20

>=3.0.0, <4.7.1 · fixed in 4.7.1

Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability

• CWE-20

>=6.0.0, <6.0.32 || >=8.0.0, <8.0.7 · fixed in 6.0.32, 8.0.7

Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability

• Path traversal

>=4.6.0-preview.18571.3, <6.0.1 · fixed in 6.0.1

Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability

• Memory corruption

>=8.0.0, <8.0.7 · fixed in 8.0.7

Microsoft Security Advisory CVE-2024-30105 | .NET Denial of Service Vulnerability

• Denial of service

>=7.0.0, <8.0.4 · fixed in 8.0.4

NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities

• SQL injection

<5.4.9 || >=5.5.0, <5.5.2 · fixed in 5.4.9, 5.5.2

OPCFoundation.NetStandard.Opc.Ua.Core buffer-management vulnerability

• Denial of service

<1.5.374.54 · fixed in 1.5.374.54

TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option

• Cross-site scripting (XSS)

<5.11.0 || >=6.0.0, <6.8.4 || >=7.0.0, <7.2.0 · fixed in 5.11.0, 6.8.4, 7.2.0

TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements

• Cross-site scripting (XSS)

<5.11.0 || >=6.0.0, <6.8.4 || >=7.0.0, <7.2.0 · fixed in 5.11.0, 6.8.4, 7.2.0

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

• Race condition

<1.6.0-beta.4.0.20240610221955-50774cd97099 · fixed in 1.6.0-beta.4.0.20240610221955-50774cd97099

Azure Storage Movement Client Library Denial of Service Vulnerability

• CWE-1104

<2.0.5 · fixed in 2.0.5

Umbraco Commerce vulnerable to Stored Cross-site Scripting on Print Functionality

• Cross-site scripting (XSS)

<10.0.5 || >=12.0.0, <12.1.4 · fixed in 10.0.5, 12.1.4

Umbraco Forms components vulnerable to Stored Cross-site Scripting

• Cross-site scripting (XSS)

>=8.0.0, <8.13.13 || >=10.0.0, <10.5.3 || >=12.0.0, <12.2.2 || >=13.0.0, <13.0.1 · fixed in 8.13.13, 10.5.3, 12.2.2, 13.0.1

Umbraco CMS Vulnerable to Stored XSS on Content Page Through Markdown Editor Preview Pane

• Cross-site scripting (XSS)

>=8.0.0, <8.18.13 || >=10.0.0, <10.8.4 || >=12.0.0, <12.3.7 || >=13.0.0, <13.1.1 · fixed in 8.18.13, 10.8.4, 12.3.7, 13.1.1

Umbraco CMS Open Redirect Bypass Protection

• Open redirect

>=8.18.5, <8.18.14 || >=10.5.0, <10.8.6 || >=12.0.0, <12.3.10 || >=13.0.0, <13.3.1 · fixed in 8.18.14, 10.8.6, 12.3.10, 13.3.1

Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability

• Race condition

>=7.0.0, <7.0.19 || >=8.0.0, <8.0.5 · fixed in 7.0.19, 8.0.5

Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability

• Memory corruption

>=7.0.0, <7.0.19 || >=8.0.0, <8.0.5 · fixed in 7.0.19, 8.0.5

Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability

• CWE-20

<=2.23.0 · no fixed version yet

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")

• Information disclosure

<1.78 · fixed in 1.78

Bouncy Castle crafted signature and public key can be used to trigger an infinite loop

• Denial of service

>=1.73, <1.78 · fixed in 1.78

Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.

• Memory corruption
• Denial of service

<1.0.2.5 · fixed in 1.0.2.5

Npgsql vulnerable to SQL Injection via Protocol Message Size Overflow

• SQL injection
• Memory corruption

<4.0.14 || >=4.1.0, <4.1.13 || >=5.0.0, <5.0.18 || >=6.0.0, <6.0.11 || >=7.0.0, <7.0.7 || >=8.0.0, <8.0.3 · fixed in 4.0.14, 4.1.13, 5.0.18, 6.0.11, 7.0.7, 8.0.3

Umbraco Workflow's Backoffice users can execute arbitrary SQL

• SQL injection

<10.1.2 · fixed in 10.1.2

.NET Elevation of Privilege Vulnerability

• Memory corruption

<6.0.29 || >=7.0.0, <7.0.18 || >=8.0.0, <8.0.4 · fixed in 6.0.29, 7.0.18, 8.0.4

Blind SSRF Leads to Port Scan by using Webhooks

• Server-side request forgery (SSRF)

>=13.0.0, <13.1.1 · fixed in 13.1.1

MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service

• Broken access control
• CWE-926

>=4.48.0, <4.59.1 || >=4.60.0, <4.60.3 · fixed in 4.59.1, 4.60.3

SixLabors.ImageSharp vulnerable to data leakage

• CWE-212
• CWE-226

<2.1.8 || >=3.0.0, <3.1.4 · fixed in 2.1.8, 3.1.4

SixLabors.ImageSharp vulnerable to Memory Allocation with Excessive Size Value

• Denial of service

<2.1.8 || >=3.0.0, <3.1.4 · fixed in 2.1.8, 3.1.4

Sensitive query parameters logged by default in OpenTelemetry.Instrumentation http and AspNetCore

• Information disclosure
• CWE-212

<1.8.1 · fixed in 1.8.1

Azure Identity Library for .NET Information Disclosure Vulnerability

• Hard-coded credentials

<1.11.0 · fixed in 1.11.0

TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes

• Cross-site scripting (XSS)

<6.8.1 · fixed in 6.8.1

TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements

• Cross-site scripting (XSS)

<7.0.0 · fixed in 7.0.0

WiX based installers are vulnerable to binary hijack when run as SYSTEM

• Broken access control

<3.14.1 || >=4.0.0, <4.0.5 · fixed in 3.14.1, 4.0.5

Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated files

• Path traversal

<3.14.1 || >=4.0.0, <4.0.5 · fixed in 3.14.1, 4.0.5

WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM

<5.0.0-psw-wix.0265-49 · fixed in 5.0.0-psw-wix.0265-49

WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM

<3.15.0-a46 · fixed in 3.15.0-a46

Umbraco possible user enumeration

• Information disclosure
• CWE-204

>=10.0.0, <10.8.5 · fixed in 10.8.5