agentprime Advisories: NuGet

Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability

Tue, 03 Nov 2026 17:33:48 GMT

Microsoft.DotNet.ILCompiler >=8.0.0, <8.0.33 || >=9.0.0, <9.0.22 || >=10.0.0, <10.0.14 || >=11.0.0-preview.1.26104.118, <11.0.0-rc.3.26522.148, fixed in 8.0.33, 9.0.22, 10.0.14, 11.0.0-rc.3.26522.148. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution

Tue, 03 Nov 2026 16:37:44 GMT

Metalama.Framework <2025.1.18 || >=2026.0.1-preview, <2026.0.25 || >=2026.1.0-preview, <2026.1.19, fixed in 2025.1.18, 2026.0.25, 2026.1.19. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)

Wed, 28 Oct 2026 19:49:44 GMT

MySqlConnector <2.6.1, fixed in 2.6.1. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization

Tue, 27 Oct 2026 21:07:12 GMT

tinymce >=7.9.3, <7.9.4 || >=8.5.1, <8.9.3, fixed in 7.9.4, 8.9.3. CVSS 8.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

MessagePack: Nested arrays can blow past buffer length limits

Thu, 15 Oct 2026 18:35:46 GMT

MessagePack <2.5.303 || >=3.0.0, <3.1.9, fixed in 2.5.303, 3.1.9. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion

Wed, 14 Oct 2026 20:11:29 GMT

Microsoft.OpenApi.Readers <1.6.30, fixed in 1.6.30. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Metalama allows local code execution through DLL planting in shared temporary directories

Wed, 14 Oct 2026 19:24:53 GMT

Metalama.Framework <2025.1.18 || >=2026.0.0-preview, <2026.0.25 || >=2026.1.0-preview, <2026.1.19, fixed in 2025.1.18, 2026.0.25, 2026.1.19. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability

Tue, 13 Oct 2026 20:53:46 GMT

Microsoft.WindowsDesktop.App.Runtime.win-arm64 >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability

Tue, 13 Oct 2026 20:53:19 GMT

Microsoft.AspNetCore.App.Runtime.linux-arm >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13, fixed in 8.0.32, 9.0.21, 10.0.13. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability

Tue, 13 Oct 2026 20:52:52 GMT

Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability

Tue, 13 Oct 2026 20:52:24 GMT

Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 20:51:51 GMT

Microsoft.NETCore.App.Runtime.linux-arm >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability

Tue, 13 Oct 2026 20:51:12 GMT

Microsoft.AspNetCore.Components.WebAssembly.Server >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 20:50:45 GMT

Microsoft.AspNetCore.Authentication.Negotiate >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13, fixed in 8.0.32, 9.0.21, 10.0.13. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability

Tue, 13 Oct 2026 20:50:11 GMT

Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability

Tue, 13 Oct 2026 20:49:39 GMT

Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability

Tue, 13 Oct 2026 20:49:06 GMT

System.Security.Cryptography.Xml >=8.0.0, <8.0.5 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.5, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability

Tue, 13 Oct 2026 20:48:38 GMT

Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability

Tue, 13 Oct 2026 20:48:07 GMT

Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure Vulnerability

Tue, 13 Oct 2026 20:47:31 GMT

Microsoft.WindowsDesktop.App.Runtime.win-arm64 >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure Vulnerability

Tue, 13 Oct 2026 20:46:53 GMT

Microsoft.WindowsDesktop.App.Runtime.win-arm64 >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure Vulnerability

Tue, 13 Oct 2026 20:46:25 GMT

Microsoft.WindowsDesktop.App.Runtime.win-arm64 >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability

Tue, 13 Oct 2026 20:45:50 GMT

Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability

Tue, 13 Oct 2026 20:45:13 GMT

System.Security.Cryptography.Xml >=8.0.0, <8.0.5, fixed in 8.0.5. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 20:44:11 GMT

Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability

Tue, 13 Oct 2026 20:42:44 GMT

Microsoft.Native.Quic.MsQuic.Schannel >=1.9.0, <2.5.12 || >=2.6.0, <2.6.3, fixed in 2.5.12, 2.6.3. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability

Tue, 13 Oct 2026 20:41:40 GMT

Microsoft.NETCore.App.Runtime.linux-arm >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability

Tue, 13 Oct 2026 20:40:50 GMT

Microsoft.AspNetCore.App.Runtime.linux-arm >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability

Tue, 13 Oct 2026 20:37:27 GMT

Microsoft.AspNetCore.App.Runtime.linux-arm >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability

Tue, 13 Oct 2026 20:36:22 GMT

Microsoft.AspNetCore.App.Runtime.linux-arm >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-70197 - .NET and Visual Studio Remote Code Execution Vulnerability

Tue, 13 Oct 2026 20:34:32 GMT

Microsoft.NETCore.App.Runtime.win-arm64 >=8.0.0, <8.0.33 || >=9.0.0, <9.0.22 || >=10.0.0, <10.0.14 || >=11.0.0-preview.1, <11.0.0-rc.3.26522.148, fixed in 8.0.33, 9.0.22, 10.0.14, 11.0.0-rc.3.26522.148. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability

Tue, 13 Oct 2026 20:32:47 GMT

Microsoft.NETCore.App.Runtime.linux-arm >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability

Tue, 13 Oct 2026 20:27:36 GMT

Microsoft.AspNetCore.Components.WebAssembly.Server >=10.0.0, <10.0.14 || >=11.0.0-preview.1, <11.0.0-rc.3.26522.148, fixed in 10.0.14, 11.0.0-rc.3.26522.148. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability

Tue, 13 Oct 2026 20:26:27 GMT

Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability

Tue, 13 Oct 2026 20:25:37 GMT

Microsoft.NETCore.App.Runtime.linux-arm >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability

Tue, 13 Oct 2026 20:11:58 GMT

Microsoft.AspNetCore.SignalR.Protocols.MessagePack >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.5, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability

Tue, 13 Oct 2026 20:07:20 GMT

System.Security.Cryptography.Pkcs >=8.0.0, <8.0.2 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.2, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service Vulnerability

Tue, 13 Oct 2026 20:05:52 GMT

Microsoft Security Advisory CVE-2026-84008 - .NET Denial of Service Vulnerability

Tue, 13 Oct 2026 20:03:30 GMT

System.Security.Cryptography.Pkcs >=8.0.0, <8.0.2 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.2, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability

Tue, 13 Oct 2026 20:01:59 GMT

Microsoft.NETCore.App.Runtime.linux-arm >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability

Tue, 13 Oct 2026 20:00:42 GMT

Microsoft.NETCore.App.Runtime.linux-arm >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 11.0.0-rc.2. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability

Tue, 13 Oct 2026 19:59:23 GMT

Microsoft.AspNetCore.App.Runtime.linux-arm >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability

Tue, 13 Oct 2026 19:58:12 GMT

Microsoft.AspNetCore.App.Runtime.linux-arm >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13, fixed in 8.0.32, 9.0.21, 10.0.13. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability

Tue, 13 Oct 2026 19:56:35 GMT

Microsoft.Native.Quic.MsQuic.Schannel >=2.5.11-ci.156755675, <2.5.11-ci.159417053, fixed in 2.5.11-ci.159417053. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability

Tue, 13 Oct 2026 19:47:44 GMT

Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 19:44:54 GMT

Microsoft.AspNetCore.App.Runtime.linux-arm >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13, fixed in 8.0.32, 9.0.21, 10.0.13. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service Vulnerability

Tue, 13 Oct 2026 19:41:19 GMT

Microsoft.AspNetCore.SignalR.Common >=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.5, <11.0.0-rc.2, fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer

Wed, 07 Oct 2026 20:24:46 GMT

SixLabors.ImageSharp >=2.1.0, <3.2.0 || >=4.0.0, <4.1.2, fixed in 3.2.0, 4.1.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate

Wed, 07 Oct 2026 20:24:42 GMT

SixLabors.ImageSharp >=4.0.0, <4.1.2, fixed in 4.1.2. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

ImageSharp: ICC LUT16 output channel count can write beyond Vector4

Wed, 07 Oct 2026 20:24:37 GMT

SixLabors.ImageSharp >=4.0.0, <4.1.2, fixed in 4.1.2. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.