NuGet Advisories.

ABP Account Module has an Open Redirect through Improper validation in its register function

• Open redirect
• CWE-20

>=5.1.0, <10.0.0-rc.2 · fixed in 10.0.0-rc.2

ImageMagick is vulnerable to an integer Overflow in TIM decoder leading to out of bounds read (32-bit only)

• Memory corruption

<14.10.0 · fixed in 14.10.0

Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality

• Information disclosure
• CWE-377

>=10.0.0, <13.12.1 · fixed in 13.12.1

Csla affected by Remote Code Execution via WcfProxy (NetDataContractSerializer)

• Insecure deserialization

<6.0.0 · fixed in 6.0.0

Withdrawn Advisory: Emby Server API Vulnerability allowing to gain administrative access without precondition

• CWE-640

<4.9.1.81 · fixed in 4.9.1.81

Withdrawn Advisory: ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family

• Memory corruption

<=14.9.1 · no fixed version yet

DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite

• Unrestricted file upload

<10.1.1 · fixed in 10.1.1

DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload

• Cross-site scripting (XSS)

<10.1.1 · fixed in 10.1.1

DNN CKEditor Provider allows unauthenticated upload out-of-the-box

• Unrestricted file upload
• CWE-1188

<10.1.1 · fixed in 10.1.1

ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)

• Memory corruption

<14.9.0 · fixed in 14.9.0

ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)

• Memory corruption
• Denial of service

<=14.9.0 · no fixed version yet

Piranha CMS vulnerable to stored cross-site scripting (XSS)

• Cross-site scripting (XSS)

<=12.0.0 · no fixed version yet

Mammoth is vulnerable to Directory Traversal

• Path traversal

>=0.3.25, <1.11.0 · fixed in 1.11.0

Smidge is vulnerable to Path Traversal

• Path traversal

<4.6.0 · fixed in 4.6.0

Apache ActiveMQ NMS AMQP Client has a Deserialization of Untrusted Data vulnerability

• Insecure deserialization

<2.4.0 · fixed in 2.4.0

Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability

• Weak cryptography or TLS

>=8.0.0, <8.0.21 || >=9.0.0, <9.0.10 · fixed in 8.0.21, 9.0.10

Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability

• Path traversal

>=17.8.0, <17.8.43 || >=17.10.0, <17.10.46 || >=17.11.0, <17.11.48 || >=17.12.0, <17.12.50 || >=17.14.0, <17.14.28 || >=17.15.0-preview-25277-114, <18.0.0-preview-25476-107 · fixed in 17.8.43, 17.10.46, 17.11.48, 17.12.50, 17.14.28, 18.0.0-preview-25476-107

Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability

• HTTP request smuggling

<2.3.6 · fixed in 2.3.6

Duplicate Advisory: Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability

• Path traversal

>=17.15.0-preview-25277-114, <18.0.0-preview-25476-107 · fixed in 18.0.0-preview-25476-107

Duplicate Advisory: Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability

• Weak cryptography or TLS

>=9.0.0, <9.0.10 · fixed in 9.0.10

Amazon.IonDotnet is vulnerable to Denial of Service attacks

• Denial of service
• CWE-1286

<1.3.2 · fixed in 1.3.2

Akka.Remote TLS did not properly implement certificate-based authentication

• Authentication bypass
• Weak cryptography or TLS

>=1.2.0, <1.5.52 · fixed in 1.5.52

FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint

• Information disclosure
• Broken access control

<0.5.5 · fixed in 0.5.5

PiranhaCMS stored XSS

• Cross-site scripting (XSS)

<=12.0 · no fixed version yet

DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile

• Cross-site scripting (XSS)

<10.1.0 · fixed in 10.1.0

DNN Vulnerable to Stored XSS Using Backend Admin Credentials

• Cross-site scripting (XSS)

<10.1.0 · fixed in 10.1.0

DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module

• Cross-site scripting (XSS)

<10.1.0 · fixed in 10.1.0

DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field

• Cross-site scripting (XSS)

<10.1.0 · fixed in 10.1.0

DNN allows loading unused themes on anonymous clients through query parameters

• Information disclosure
• CWE-20

<10.1.0 · fixed in 10.1.0

Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain

• Weak cryptography or TLS

<17.0.14 · fixed in 17.0.14

ImageMagick BlobStream Forward-Seek Under-Allocation

• Memory corruption

<14.8.2 · fixed in 14.8.2

FormCms avatar upload feature has a stored cross-site scripting (XSS) vulnerability

• Cross-site scripting (XSS)
• Unrestricted file upload

<0.5.7 · fixed in 0.5.7

ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow

• Memory corruption

<14.8.1 · fixed in 14.8.1

ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution

• Memory corruption
• CWE-123

<14.8.1 · fixed in 14.8.1

ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash

• Denial of service

<14.8.1 · fixed in 14.8.1

ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree

• CWE-758

<14.8.0 · fixed in 14.8.0

imagemagick: integer overflows in MNG magnification

• Memory corruption

<14.8.0 · fixed in 14.8.0

imagemagick: heap-buffer overflow read in MNG magnification with alpha

• Memory corruption

<14.8.0 · fixed in 14.8.0

ImageMagick has a heap-buffer-overflow

• Memory corruption

<13.2.0 · fixed in 13.2.0

ImageMagick has a Memory Leak in magick stream

• Memory corruption
• Denial of service

<14.7.0 · fixed in 14.7.0

ImageMagick has a Heap Buffer Overflow in InterpretImageFilename

• Memory corruption
• CWE-193

<14.7.0 · fixed in 14.7.0

ImageMagick has a Stack Buffer Overflow in image.c

• Memory corruption

<14.7.0 · fixed in 14.7.0

SixLabors ImageSharp Has Infinite Loop in GIF Decoder When Skipping Malformed Comment Extension Blocks

• Denial of service

<2.1.11 || >=3.0.0, <3.1.11 · fixed in 2.1.11, 3.1.11

Umbraco Delivery API allows for cached requests to be returned with an invalid API key

• Information disclosure

>=13.0.0, <13.9.3 || >=15.0.0, <15.4.4 || >=16.0.0, <16.1.1 · fixed in 13.9.3, 15.4.4, 16.1.1

ImageMagick has XMP profile write that triggers hang due to unbounded loop

• Denial of service

<14.7.0 · fixed in 14.7.0

SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite

• CWE-197

<=2.1.11 · no fixed version yet

Umbraco CMS disclosure of configured password requirements

• Information disclosure

>=10.0.0, <10.8.11 || >=13.0.0, <13.9.2 · fixed in 10.8.11, 13.9.2

DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input

• Information disclosure

>=6.0.0, <10.0.1 · fixed in 10.0.1

DNN.PLATFORM possibly allows bypass of IP Filters

• Broken access control

>=7.0.0, <10.0.1 · fixed in 10.0.1

DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed

• Cross-site scripting (XSS)

>=6.0.0, <10.0.1 · fixed in 10.0.1

DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects

• Cross-site scripting (XSS)

>=6.0.0, <10.0.1 · fixed in 10.0.1

DotVVM allows path traversal when deployed in Debug mode

• Path traversal

<4.2.10 || >=4.3.0-preview01-final, <4.3.8 || >=5.0.0-preview01-final, <5.0.0-preview03-final · fixed in 4.2.10, 4.3.8, 5.0.0-preview03-final

Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates

• Weak cryptography or TLS

<3.7.1 · fixed in 3.7.1

Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability

• CWE-426

>=8.0.0, <8.0.17 || >=9.0.0, <9.0.6 · fixed in 8.0.17, 9.0.6

Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads

• Unrestricted file upload

>=14.0.0, <15.4.2 · fixed in 15.4.2

DNN allows Stored Cross-Site Scripting (XSS) with svg files rendered inline

• Cross-site scripting (XSS)

<9.13.9 · fixed in 9.13.9

Reflected Cross-Site Scripting (XSS) in module actions in edit mode

• Cross-site scripting (XSS)

<9.13.9 · fixed in 9.13.9

DNN site Import could use an external source with a crafted request

• CWE-841

<9.13.9 · fixed in 9.13.9

Microsoft.Build.Tasks.Core .NET Spoofing Vulnerability

• Path traversal

>=15.8.166, <15.9.30 || >=16.0.461, <16.11.6 || >=17.0.0, <17.8.29 || >=17.9.5, <17.10.29 || >=17.11.4, <17.12.36 || >=17.12.6, <17.13.26 || >=17.13.9, <17.14.8 · fixed in 15.9.30, 16.11.6, 17.8.29, 17.10.29, 17.12.36, 17.13.26, 17.14.8

Umbraco.Forms has HTML injection vulnerability in 'Send email' workflow

• CWE-116

>=7.0.0, <13.4.2 || >=14.0.0, <15.1.2 · fixed in 13.4.2, 15.1.2