Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-pjxj-pchx-4c3m
  • NuGet/Magick.NET-Q16-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
  • NuGet/Magick.NET-Q16-HDRI-arm64
  • NuGet/Magick.NET-Q16-HDRI-x64
  • ... 12 more
 ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow 6 days ago
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-6588-8gv4-xfgh
  • NuGet/System.Security.Cryptography.Xml
 Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability 28 Jul
  • Fix available
  • Severity - 7.5 (High)
GHSA-28gm-jrmw-xx93
  • NuGet/SIPSorcery
 SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS) 28 Jul
  • Fix available
  • Severity - 7.5 (High)
GHSA-464c-974j-9xm6
  • Go/github.com/aws/aws-cdk-go/awscdk
  • Go/github.com/aws/aws-cdk-go/awscdk/v2
  • Maven/software.amazon.awscdk:aws-cdk-lib
  • Maven/software.amazon.awscdk:codebuild
  • NuGet/Amazon.CDK.AWS.CodeBuild
  • ... 5 more
 AWS CDK CodeBuild S3 Log Encryption Boolean Inversion 24 Jul
  • Fix available
  • Severity - 3.3 (Low)
GHSA-h22j-f9xw-xjjm
  • NuGet/Magick.NET-Q16-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-x86
  • NuGet/Magick.NET-Q16-x86
  • NuGet/Magick.NET-Q8-AnyCPU
  • ... 1 more
 ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds 24 Jul
  • Fix available
  • Severity - 5.1 (Medium)
GHSA-422r-8c97-xcg4
  • NuGet/Magick.NET-Q16-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
  • NuGet/Magick.NET-Q16-HDRI-arm64
  • NuGet/Magick.NET-Q16-HDRI-x64
  • ... 12 more
 ImageMagick: Heap Buffer Over-Write in fx operation 24 Jul
  • Fix available
  • Severity - 5.0 (Medium)
GHSA-f5m7-cqgw-8hm7
  • NuGet/Magick.NET-Q16-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
  • NuGet/Magick.NET-Q16-HDRI-arm64
  • NuGet/Magick.NET-Q16-HDRI-x64
  • ... 12 more
 ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided 24 Jul
  • Fix available
  • Severity - 4.7 (Medium)
GHSA-p5rm-jg5c-8c77
  • NuGet/Microsoft.OpenApi.Kiota
 Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass) 24 Jul
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-4vv7-jj25-4gh6
  • NuGet/Microsoft.OpenApi.Kiota
  • NuGet/Microsoft.OpenApi.Kiota.Builder
 Microsoft Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName 24 Jul
  • Fix available
  • Severity - 7.0 (High)
GHSA-hq9q-27g5-qwpj
  • NuGet/Microsoft.OpenApi.Kiota
  • NuGet/Microsoft.OpenApi.Kiota.Builder
 Microsoft Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info` 24 Jul
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-4rj6-vrwv-wr8m
  • NuGet/Microsoft.OpenApi.Kiota
  • NuGet/Microsoft.OpenApi.Kiota.Builder
 Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF 24 Jul
  • Fix available
  • Severity - 7.0 (High)
GHSA-rg4h-fpcp-2qm8
  • NuGet/Microsoft.OpenApi.Kiota
  • NuGet/Microsoft.OpenApi.Kiota.Builder
 Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref 24 Jul
  • Fix available
  • Severity - 7.1 (High)
GHSA-4jwf-m4wg-8p66
  • NuGet/Microsoft.OpenApi.Kiota
  • NuGet/Microsoft.OpenApi.Kiota.Builder
 Microsoft Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions 24 Jul
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-jqwh-526h-c92j
  • NuGet/Microsoft.OpenApi.Kiota
  • NuGet/Microsoft.OpenApi.Kiota.Builder
 Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator 24 Jul
  • Fix available
  • Severity - 8.7 (High)
GHSA-7f3j-j7jj-r3vr
  • NuGet/Microsoft.OpenAPI.Kiota
  • NuGet/Microsoft.OpenAPI.Kiota.Builder
  • NuGet/Microsoft.OpenApi.Kiota
  • NuGet/Microsoft.OpenApi.Kiota.Builder
 Microsoft Kiota: Code Generation Literal Injection in Kiota Python Generator 24 Jul
  • Fix available
  • Severity - 7.5 (High)
GHSA-xg2h-5xr2-29jw
  • NuGet/Microsoft.OpenAPI.Kiota
  • NuGet/Microsoft.OpenAPI.Kiota.Builder
  • NuGet/Microsoft.OpenApi.Kiota
  • NuGet/Microsoft.OpenApi.Kiota.Builder
 Microsoft Kiota: Code Generation Literal Injection in Kiota Ruby Generator 24 Jul
  • Fix available
  • Severity - 7.5 (High)
Load more...