Vulnerability Library

ID
Packages
Summary
Affected versions
Published
Fix
GHSA-j646-gj5p-p45g
  • NuGet/CefSharp.Common
  • NuGet/CefSharp.Common.NETCore
CefSharp affected by heap buffer overflow in WebP
  • 100.0.120-pre
  • 100.0.140
  • 100.0.230
  • 101.0.150
  • 101.0.180
  • 102.0.100
  • 102.0.90
  • ...
2023-09-21T17:11:42Z Fix available
GHSA-fv2h-753j-9g39
  • NuGet/Sustainsys.Saml2
  • NuGet/Sustainsys.Saml2
Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation
  • 0.23.0
  • 0.24.0
  • 1.0.0
  • 1.0.1
  • 1.0.2
  • 2.0.0
  • 2.1.0
  • ...
2023-09-20T23:01:52Z Fix available
GHSA-3qf9-qxfj-4whc
  • NuGet/Microsoft.NETCore.App.Runtime.win-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.win-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x86
  • NuGet/Microsoft.NETCore.App.Runtime.win-x86
Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability
  • 7.0.0
  • 7.0.1
  • 7.0.10
  • 7.0.2
  • 7.0.3
  • 7.0.4
  • 7.0.5
  • ...
2023-09-12T20:51:36Z Fix available
GHSA-38fq-h5hc-gwv8
  • NuGet/Microsoft.NETCore.App.Runtime.win-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.win-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x86
  • NuGet/Microsoft.NETCore.App.Runtime.win-x86
Microsoft Security Advisory CVE-2023-36794: .NET Remote Code Execution Vulnerability
  • 7.0.0
  • 7.0.1
  • 7.0.10
  • 7.0.2
  • 7.0.3
  • 7.0.4
  • 7.0.5
  • ...
2023-09-12T20:26:05Z Fix available
GHSA-g4p8-g7mq-wpx4
  • NuGet/Microsoft.NETCore.App.Runtime.win-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.win-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x86
  • NuGet/Microsoft.NETCore.App.Runtime.win-x86
Microsoft Security Advisory CVE-2023-36793: .NET Remote Code Execution Vulnerability
  • 7.0.0
  • 7.0.1
  • 7.0.10
  • 7.0.2
  • 7.0.3
  • 7.0.4
  • 7.0.5
  • ...
2023-09-12T20:15:59Z Fix available
GHSA-h7jm-g87p-5935
  • NuGet/Microsoft.NETCore.App.Runtime.win-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.win-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x86
  • NuGet/Microsoft.NETCore.App.Runtime.win-x86
Microsoft Security Advisory CVE-2023-36796: .NET Remote Code Execution Vulnerability
  • 7.0.0
  • 7.0.1
  • 7.0.10
  • 7.0.2
  • 7.0.3
  • 7.0.4
  • 7.0.5
  • ...
2023-09-12T20:05:18Z Fix available
GHSA-h3hv-63q5-jgpr
  • NuGet/Microsoft.NETCore.App.Runtime.linux-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-musl-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-arm
  • NuGet/Microsoft.NETCore.App.Runtime.linux-musl-arm
  • NuGet/Microsoft.NETCore.App.Runtime.linux-musl-x64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-x64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-x64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-musl-x64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-musl-arm
  • NuGet/Microsoft.NETCore.App.Runtime.linux-arm
  • NuGet/Microsoft.NETCore.App.Runtime.linux-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-musl-arm64
Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability
  • 7.0.0
  • 7.0.1
  • 7.0.10
  • 7.0.2
  • 7.0.3
  • 7.0.4
  • 7.0.5
  • ...
2023-09-12T19:57:06Z Fix available
GHSA-j7hp-h8jx-5ppr
  • crates.io/libwebp-sys2
  • crates.io/libwebp-sys
  • npm/electron
  • npm/electron
  • npm/electron
  • npm/electron
  • npm/electron
  • NuGet/SkiaSharp
  • Go/github.com/chai2010/webp
libwebp: OOB write in BuildHuffmanTable
  • 2.80.0
  • 2.80.1
  • 2.80.2
  • 2.80.3
  • 2.80.4
  • 2.88.0
  • 2.88.1
  • ...
2023-09-12T15:30:20Z Fix available
GHSA-j8rm-cm55-qqj6
  • NuGet/Microsoft.AspNetCore.SignalR.StackExchangeRedis
  • NuGet/Microsoft.AspNetCore.SignalR.StackExchangeRedis
  • NuGet/Microsoft.AspNetCore.SignalR.Redis
.NET Information Disclosure Vulnerability
  • 7.0.0
  • 7.0.1
  • 7.0.2
  • 7.0.3
  • 7.0.4
  • 7.0.5
  • 7.0.7
  • ...
2023-08-11T20:54:45Z Fix available
GHSA-6r78-m64m-qwcf
  • NuGet/moq
Moq v4.20.0-rc to 4.20.1 share hashed user data
  • 4.20.0
  • 4.20.0-rc
  • 4.20.1
2023-08-10T19:25:23Z Fix available
GHSA-p8rx-fwgq-rh2f
  • NuGet/Microsoft.NET.Build.Containers
.NET Remote Code Execution Vulnerability
  • 0.1.8
  • 0.2.7
  • 0.3.2
  • 0.4.0
  • 7.0.302
  • 7.0.304
  • 7.0.305
  • ...
2023-08-09T13:15:38Z Fix available
GHSA-p57v-gv7q-4xfm
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-arm64
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-arm
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-x64
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-x86
  • NuGet/Microsoft.NetCore.App.Runtime.win-arm
  • NuGet/Microsoft.NetCore.App.Runtime.win-arm64
  • NuGet/Microsoft.NetCore.App.Runtime.win-x64
  • NuGet/Microsoft.NetCore.App.Runtime.win-x86
.NET Denial of Service Vulnerability
  • 7.0.0
  • 7.0.1
  • 7.0.2
  • 7.0.3
  • 7.0.4
  • 7.0.5
  • 7.0.7
  • ...
2023-08-09T13:04:54Z Fix available
GHSA-vmch-3w2x-vhgq
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-arm64
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-x64
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-x86
  • NuGet/Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-arm64
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-x64
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-x86
  • NuGet/Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv
  • NuGet/Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets
.NET Denial of Service Vulnerability
  • 7.0.0
  • 7.0.1
  • 7.0.2
  • 7.0.3
  • 7.0.4
  • 7.0.5
  • 7.0.7
  • ...
2023-08-09T12:56:43Z Fix available
GHSA-h8wc-r4jh-mg7m
  • NuGet/Umbraco.Cms.Infrastructure
  • NuGet/Umbraco.Cms.Infrastructure
  • NuGet/Umbraco.Cms.Infrastructure
  • NuGet/Umbraco.Cms.Web.BackOffice
  • NuGet/Umbraco.Cms.Web.BackOffice
  • NuGet/Umbraco.Cms.Web.BackOffice
Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions
  • 10.0.0
  • 10.0.0-rc5
  • 10.0.1
  • 10.1.0
  • 10.1.0-rc
  • 10.1.0-rc2
  • 10.1.1
  • ...
2023-07-13T17:02:07Z Fix available
GHSA-485r-rp8v-998v
  • NuGet/Microsoft.WindowsDesktop.App.Runtime.win-arm64
  • NuGet/Microsoft.WindowsDesktop.App.Runtime.win-arm64
  • NuGet/Microsoft.WindowsDesktop.App.Runtime.win-x64
  • NuGet/Microsoft.WindowsDesktop.App.Runtime.win-x64
  • NuGet/Microsoft.WindowsDesktop.App.Runtime.win-x86
  • NuGet/Microsoft.WindowsDesktop.App.Runtime.win-x86
Microsoft Security Advisory CVE-2023-33127: .NET Remote Code Execution Vulnerability
  • 7.0.0
  • 7.0.1
  • 7.0.2
  • 7.0.3
  • 7.0.4
  • 7.0.5
  • 7.0.7
  • ...
2023-07-11T22:45:28Z Fix available
GHSA-25c8-p796-jg6r
  • NuGet/Microsoft.AspNetCore.Identity
  • NuGet/Microsoft.AspNet.Identity.Owin
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-arm
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-arm64
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-musl-arm
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-x64
  • NuGet/Microsoft.AspNetCore.App.Runtime.osx-x64
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-arm
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-arm64
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-x64
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-x86
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-x86
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-x64
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-arm64
  • NuGet/Microsoft.AspNetCore.App.Runtime.win-arm
  • NuGet/Microsoft.AspNetCore.App.Runtime.osx-x64
  • NuGet/Microsoft.AspNetCore.App.Runtime.osx-arm64
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-x64
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-musl-x64
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-musl-arm
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-arm
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-arm64
  • NuGet/Microsoft.AspNetCore.App.Runtime.linux-musl-x64
  • NuGet/Microsoft.AspNetCore.App.Runtime.osx-arm64
Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability
  • 0.0.1-alpha
  • 1.0.0
  • 1.0.0-rc2-final
  • 1.0.1
  • 1.0.2
  • 1.0.3
  • 1.0.4
  • ...
2023-07-11T22:45:20Z Fix available