NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-1289MediumMagick.NET-Q16-AnyCPU: ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS CVE-2026-30937MediumMagick.NET-Q16-AnyCPU: ImageMagick has heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation CVE-2026-30936MediumMagick.NET-Q16-AnyCPU: ImageMagick has Heap Buffer Overflow in WaveletDenoiseImage CVE-2026-30935MediumMagick.NET-Q16-AnyCPU: ImageMagick has Heap Buffer Over-Read in BilateralBlurImage CVE-2026-30931MediumMagick.NET-Q16-AnyCPU: ImageMagick has heap-based buffer overflow in UHDR encoder CVE-2026-30929HighMagick.NET-Q16-AnyCPU: ImageMagick has stack buffer overflow in MagnifyImage CVE-2026-28693HighMagick.NET-Q16-AnyCPU: ImageMagick: Integer overflow in DIB coder can result in out of bounds read or write CVE-2026-28691HighMagick.NET-Q16-AnyCPU: ImageMagick has uninitialized pointer dereference in JBIG decoder CVE-2026-28690MediumMagick.NET-Q16-AnyCPU: ImageMagick has stack write buffer overflow in MNG encoder CVE-2026-28688MediumMagick.NET-Q16-AnyCPU: ImageMagick has heap use-after-free in the MSL encoder CVE-2026-28687MediumMagick.NET-Q16-AnyCPU: ImageMagick has Heap Use-After-Free in ImageMagick MSL decoder CVE-2026-28686MediumMagick.NET-Q16-AnyCPU: ImageMagick: Write heap-buffer-overflow in PCL encoder via undersized output buffer CVE-2026-28494HighMagick.NET-Q16-AnyCPU: ImageMagick vulnerable to stack corruption through long morphology kernel names or arrays CVE-2026-28493MediumMagick.NET-Q16-AnyCPU: ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder CVE-2026-26284MediumMagick.NET-Q16-AnyCPU: ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.CVE-2026-25986MediumMagick.NET-Q16-AnyCPU: ImageMagick has heap buffer overflow in YUV 4:2:2 decoder CVE-2026-25982MediumMagick.NET-Q16-AnyCPU: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)CVE-2026-25971MediumMagick.NET-Q16-AnyCPU: ImageMagick: MSL - Stack overflow in ProcessMSLScript CVE-2026-25970MediumMagick.NET-Q16-AnyCPU: ImageMagick Has Signed Integer Overflow in SIXEL Decoder, Leading to Memory Corruption CVE-2026-25968HighMagick.NET-Q16-AnyCPU: ImageMagick: MSL attribute stack buffer overflow leads to out of bounds write. CVE-2026-26127HighMicrosoft.Bcl.Memory: .NET Denial of Service Vulnerability CVE-2026-26130HighMicrosoft.AspNetCore.App.Runtime.linux-arm: .NET Denial of Service Vulnerability CVE-2026-26131HighMicrosoft.NetCore.App.Runtime.linux-arm: .NET Elevation of Privilege Vulnerability CVE-2026-31834HighUmbraco.Cms: Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks CVE-2026-31833MediumUmbraco.Cms: Umbraco has Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo