NuGet Advisories.

Duplicate Advisory: Microsoft Security Advisory CVE-2026-26131 – .NET Elevation of Privilege Vulnerability

• Broken access control

>=10.0.0, <10.0.4 · fixed in 10.0.4

MimeKit has CRLF Injection in Quoted Local-Part that Enables SMTP Command Injection and Email Forgery

• Other injection

<4.15.1 · fixed in 4.15.1

Umbraco.Engage.Forms Allows Unauthorized Access to Multiple API Endpoints

• Broken access control
• Authentication bypass

>=16.0.0, <16.2.1 || >=17.0.0, <17.1.1 · fixed in 16.2.1, 17.1.1

ImageMagick has a heap Buffer Over-read in its DJVU image format handler

• Memory corruption
• CWE-126

<14.10.3 · fixed in 14.10.3

ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images

• Memory corruption
• CWE-126

<14.10.3 · fixed in 14.10.3

ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization

• Memory corruption

<14.10.3 · fixed in 14.10.3

ImageMagick: Memory Leak in multiple coders that write raw pixel data

• Denial of service

<14.10.3 · fixed in 14.10.3

ImageMagick: Memory leak in coders/txt.c without freetype

• Denial of service

<14.10.3 · fixed in 14.10.3

ImageMagick: SVG-to-MVG Command Injection via coders/svg.c

• Command injection
• CWE-116

<14.10.3 · fixed in 14.10.3

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

• Memory corruption

<14.10.3 · fixed in 14.10.3

mageMagick has a possible use-after-free write in its PDB decoder

• Memory corruption

<14.10.3 · fixed in 14.10.3

ImageMagick has a possible heap Use After Free vulnerability in its meta coder

• Memory corruption

<14.10.3 · fixed in 14.10.3

ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds

• Memory corruption

<14.10.3 · fixed in 14.10.3

ImageMagick: Invalid MSL <map> can result in a use after free

• Memory corruption

<14.10.3 · fixed in 14.10.3

ImageMagick has a possible infinite loop in its JPEG encoder when using `jpeg:extent`

• Denial of service

<14.10.3 · fixed in 14.10.3

ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

• Denial of service

<14.10.3 · fixed in 14.10.3

ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder

• Memory corruption
• CWE-681

<14.10.3 · fixed in 14.10.3

ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

• Denial of service

<14.10.3 · fixed in 14.10.3

ImageMagick has a heap buffer over-read in its MAP image decoder

• Memory corruption

<14.10.3 · fixed in 14.10.3

ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder

• Denial of service

<14.10.3 · fixed in 14.10.3

ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"

• Memory corruption

<14.10.3 · fixed in 14.10.3

Image Magick has a Memory Leak in coders/ashlar.c

• Denial of service

<14.10.3 · fixed in 14.10.3

ImageMagick: Stack buffer overflow in FTXT reader via oversized integer field

• Memory corruption

<14.10.3 · fixed in 14.10.3

ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access

• Broken access control

<14.10.3 · fixed in 14.10.3

ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy

• Path traversal

<14.10.3 · fixed in 14.10.3

ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer

• Memory corruption

<14.10.3 · fixed in 14.10.3

ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write

• Memory corruption

<14.10.3 · fixed in 14.10.3

ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash

• Denial of service

<14.10.3 · fixed in 14.10.3

ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

• Memory corruption

<14.10.3 · fixed in 14.10.3

ImageMagick: Code Injection via PostScript header in ps coders

• Code injection

<14.10.3 · fixed in 14.10.3

ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths

• Denial of service

<14.10.3 · fixed in 14.10.3

ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

• Memory corruption

<14.10.3 · fixed in 14.10.3

ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions

• Memory corruption

<14.10.3 · fixed in 14.10.3

ImageMagick has memory leak in msl encoder

• Denial of service

<14.10.3 · fixed in 14.10.3

ImageMagick: Possible memory leak in ASHLAR encoder

• Denial of service

<14.10.3 · fixed in 14.10.3

ImageMagick: Out of bounds read in multiple coders read raw pixel data

• Memory corruption

<14.10.3 · fixed in 14.10.3

ImageMagick: Infinite loop vulnerability when parsing a PCD file

• Denial of service

<14.10.3 · fixed in 14.10.3

ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS

• Denial of service

<14.10.3 · fixed in 14.10.3

ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression

• Memory corruption

<14.10.3 · fixed in 14.10.3

Microsoft Security Advisory CVE-2026-21218 | .NET Security Feature Bypass Vulnerability

• CWE-166

>=8.0.0, <8.0.2 || >=9.0.0, <9.0.13 || >=10.0.0, <10.0.3 · fixed in 8.0.2, 9.0.13, 10.0.3

HtmlSanitizer has a bypass via template tag

• Cross-site scripting (XSS)
• CWE-116

<9.0.892 || >=9.1.878-beta, <9.1.893-beta · fixed in 9.0.892, 9.1.893-beta

Umbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac

• Path traversal

>=16.0.0, <16.4.1 || >=17.0.0, <17.1.1 · fixed in 16.4.1, 17.1.1

DotNetNuke.Core Vulnerable to Stored XSS via Module Title

• Cross-site scripting (XSS)

<9.13.10 || >=10.0.0, <10.2.0 · fixed in 9.13.10, 10.2.0

DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal

• Cross-site scripting (XSS)

>=9.0.0, <=9.13.9 || >=10.0.0, <10.2.0 · fixed in 10.2.0

DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes

• Cross-site scripting (XSS)

>=9.0.0, <=9.13.9 || >=10.0.0, <10.02.0 · fixed in 10.02.0

DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer

• Cross-site scripting (XSS)

>=9.0.0, <9.13.10 || >=10.0.0, <10.2.0 · fixed in 9.13.10, 10.2.0

Umbraco.Forms CDN may cache sensitive form uploads when processed by ImageSharp

• CWE-524

<13.9.0 || >=14.0.0-beta001, <16.4.0 || >=17.0.0-rc1, <17.1.0 · fixed in 13.9.0, 16.4.0, 17.1.0

ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load

• Memory corruption

<14.10.2 · fixed in 14.10.2

ImageMagick has a Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML

• Denial of service
• Memory corruption

<14.10.2 · fixed in 14.10.2

ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript

• Denial of service

<14.10.2 · fixed in 14.10.2

ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails

• Memory corruption

<14.10.2 · fixed in 14.10.2

Umbraco CMS contains a server-side request forgery vulnerability

• Server-side request forgery (SSRF)

=8.14.1 · no fixed version yet

UmbracoForms Vulnerable to Remote Code Execution via Untrusted WSDL Compilation in Dynamic SOAP Client Generation

• Code injection
• Insecure deserialization

<=8.13.16 · no fixed version yet

AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value

• CWE-20

>=4.0.0, <4.0.3.3 · fixed in 4.0.3.3

ImageMagick's failure to limit MVG mutual causes Stack Overflow

• Denial of service

<14.10.1 · fixed in 14.10.1

ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack

• Denial of service

<14.10.1 · fixed in 14.10.1

Piranha has stored cross-site scripting (XSS) vulnerability

• Cross-site scripting (XSS)

<=12.0.0 · no fixed version yet

Piranha has stored cross-site scripting (XSS) vulnerability

• Cross-site scripting (XSS)

<=12.0.0 · no fixed version yet

Umbraco CMS has an arbitrary file upload vulnerability

• Cross-site scripting (XSS)
• Unrestricted file upload

<=16.3.3 · no fixed version yet

Amazon S3 Encryption Client for .NET has a Key Commitment Issue

• Weak cryptography or TLS

<3.2.0 · fixed in 3.2.0