Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-w9pf-h6m6-v89h
  • NuGet/DotNetNuke.Core
DotNetNuke.Core Vulnerable to Stored XSS via Module Title 3 days ago
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-vm5q-8qww-h238
  • NuGet/DotNetNuke.Core
DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal 3 days ago
  • Fix available
  • Severity - 7.6 (High)
GHSA-2g5g-hcgh-q3rp
  • NuGet/DotNetNuke.Core
DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes 3 days ago
  • Fix available
  • Severity - 7.6 (High)
GHSA-jjwg-4948-6wxp
  • NuGet/DotNetNuke.Core
DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer 3 days ago
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-7jxj-rpx7-ph2c
  • NuGet/Umbraco.Forms
Umbraco.Forms CDN may cache sensitive form uploads when processed by ImageSharp 22 Jan
  • Fix available
  • Severity - 3.1 (Low)
GHSA-5vx3-wx4q-6cj8
  • NuGet/Magick.NET-Q16-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
  • NuGet/Magick.NET-Q16-HDRI-arm64
  • ... 14 more
ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load 21 Jan
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-qp59-x883-77qv
  • NuGet/Magick.NET-Q16-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
  • NuGet/Magick.NET-Q16-HDRI-arm64
  • ... 14 more
ImageMagick has a Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML 21 Jan
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-9vj4-wc7r-p844
  • NuGet/Magick.NET-Q16-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
  • NuGet/Magick.NET-Q16-HDRI-arm64
  • ... 13 more
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript 21 Jan
  • Fix available
  • Severity - 5.5 (Medium)
GHSA-39h3-g67r-7g3c
  • NuGet/Magick.NET-Q16-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
  • NuGet/Magick.NET-Q16-HDRI-arm64
  • ... 14 more
ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails 20 Jan
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-h66j-xm43-47pp
  • NuGet/UmbracoCms
Umbraco CMS contains a server-side request forgery vulnerability 15 Jan
  • No fix available
  • Severity - 6.9 (Medium)
GHSA-vrgw-pc9c-qrrc
  • NuGet/UmbracoForms
UmbracoForms Vulnerable to Remote Code Execution via Untrusted WSDL Compilation in Dynamic SOAP Client Generation 13 Jan
  • No fix available
  • Severity - 9.9 (Critical)
GHSA-9cvc-h2w8-phrp
  • NuGet/AWSSDK.Core
AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value 09 Jan
  • Fix available
  • Severity - 3.7 (Low)
GHSA-7rvh-xqp3-pr8j
  • NuGet/Magick.NET-Q16-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
  • NuGet/Magick.NET-Q16-HDRI-arm64
  • ... 12 more
ImageMagick's failure to limit MVG mutual causes Stack Overflow 30 Dec 2025
  • Fix available
  • Severity - 4.0 (Medium)
GHSA-p27m-hp98-6637
  • NuGet/Magick.NET-Q16-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-AnyCPU
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
  • NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
  • NuGet/Magick.NET-Q16-HDRI-arm64
  • ... 12 more
ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack 30 Dec 2025
  • Fix available
  • Severity - 5.3 (Medium)
MAL-2025-192890
  • NuGet/sqzrframework480
Malicious code in sqzrframework480 (NuGet) 23 Dec 2025
  • No fix available
MAL-2025-192889
  • NuGet/minimutex
Malicious code in minimutex (NuGet) 23 Dec 2025
  • No fix available