Tagged “nuget”
CVEs tagged nuget, newest first.
214 CVEsRSS
CVE-2026-92707Medium· 5.3MessagePack for C# is a MessagePack serializer for C#
MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter …
CVE-2026-62847Medium· 8.2Metalama allows local code execution through DLL planting in shared temporary directories
Metalama allows local code execution through DLL planting in shared temporary directories
GHSA-86xp-94pg-8r6rMedium· 5.3Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability
CVE-2026-96960High· 7.5Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96959High· 7.5Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96958High· 7.5Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-96236High· 7.5Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-96235High· 8.8Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-96234Medium· 5.3Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-96233High· 7.5Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-96232High· 7.5Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-96231High· 7.8Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-96230High· 8.8PoCImproper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
CVE-2026-96229Medium· 6.5Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-96225High· 7.8Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-96224High· 8.8Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-96222High· 7.4Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-88092Critical· 9.4Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.
CVE-2026-87697High· 8.8Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-85790Medium· 5.9Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
CVE-2026-85363High· 8.8Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-84008High· 7.5Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-83520High· 8.8Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-70197High· 8.1Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
CVE-2026-70196Medium· 5.9Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-70194Medium· 6.5Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-70188Critical· 9.1Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-70186High· 7.5Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVE-2026-70183High· 7.5Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVE-2026-70181High· 7.5Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.