Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-6gw6-rv2g-25mg
  • NuGet/Microsoft.OpenApi.Kiota
  • NuGet/Microsoft.OpenApi.Kiota.Builder
 Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests 5 hours ago
  • Fix available
  • Severity - 3.1 (Low)
GHSA-rm89-rhwj-9j92
  • NuGet/Microsoft.OpenApi.Kiota
  • NuGet/Microsoft.OpenApi.Kiota.Builder
 Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators 5 hours ago
  • Fix available
  • Severity - 8.8 (High)
GHSA-w5f4-fx9m-m4q7
  • NuGet/Microsoft.Native.Quic.MsQuic.OpenSSL
 MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL 5 hours ago
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-wrvw-254r-wpmv
  • NuGet/AlastairLundy.CliInvoke.Specializations
  • NuGet/CliInvoke.Specializations
 CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers 25 Sep
  • Fix available
  • Severity - 8.4 (High)
GHSA-j73w-8hfr-4gc9
  • NuGet/AlastairLundy.CliInvoke
  • NuGet/CliInvoke
 CliInvoke: Argument Injection in Extensibility Runner Factory 25 Sep
  • Fix available
  • Severity - 8.4 (High)
GHSA-7952-gx68-cjqr
  • Maven/net.sf.mpxj:mpxj
  • NuGet/MPXJ.Net
  • NuGet/net.sf.mpxj
  • NuGet/net.sf.mpxj-for-csharp
  • NuGet/net.sf.mpxj-for-vb
  • ... 2 more
 MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers 22 Sep
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-5vvx-3h34-f3gj
  • Maven/net.sf.mpxj:mpxj
  • NuGet/MPXJ.Net
  • NuGet/net.sf.mpxj
  • NuGet/net.sf.mpxj-for-csharp
  • NuGet/net.sf.mpxj-for-vb
  • ... 2 more
 MPXJ: XXE Vulnerability in MerlinReader 22 Sep
  • Fix available
  • Severity - 7.5 (High)
MAL-2026-16544
  • NuGet/dip.ioc.extensions
 Malicious code in dip.ioc.extensions (NuGet) 22 Sep
  • No fix available
MAL-2026-16488
  • NuGet/dip.infrastructure
 Malicious code in dip.infrastructure (NuGet) 22 Sep
  • No fix available
MAL-2026-16489
  • NuGet/dip.infrastructure.context
 Malicious code in dip.infrastructure.context (NuGet) 22 Sep
  • No fix available
MAL-2026-16543
  • NuGet/dip.ioc
 Malicious code in dip.ioc (NuGet) 22 Sep
  • No fix available
MAL-2026-16487
  • NuGet/dip.api
 Malicious code in dip.api (NuGet) 22 Sep
  • No fix available
GHSA-5mq7-rwhj-4fh9
  • NuGet/Steeltoe.Security.Authorization.Certificate
 Steeltoe: Header-forwarded client cert lacks proof of private-key possession 17 Sep
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-67c9-f6v2-qv86
  • NuGet/Steeltoe.Discovery.Consul
 Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS) 17 Sep
  • Fix available
  • Severity - 7.5 (High)
GHSA-hr73-3gpv-hh6q
  • NuGet/Steeltoe.Discovery.Eureka
 Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS) 17 Sep
  • Fix available
  • Severity - 7.5 (High)
GHSA-8phw-xrj9-cpqp
  • NuGet/Steeltoe.Management.Endpoint
 Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secrets 17 Sep
  • Fix available
  • Severity - 5.9 (Medium)
Load more...