NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-8VFJ-Q2CP-5M5JLowMagick.NET-Q16-AnyCPU: ImageMagick has a heap buffer overflow read in magnify operation via unrecognized magnify:method value GHSA-98CP-RJ9F-6V5GMediumMagick.NET-Q16-AnyCPU: ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete GHSA-Q8H3-JV9V-57QXLowMagick.NET-Q16-AnyCPU: ImageMagick has has an off-by-one origin validation in allows out-of-bounds read in morphology processing GHSA-W54J-7WPM-CRHJLowMagick.NET-Q16-AnyCPU: ImageMagick has a heap-buffer-overflow in FTXT encoder CVE-2026-26171HighSystem.Security.Cryptography.Xml: Microsoft Security Advisory CVE-2026-26171 – .NET Denial of Service Vulnerability CVE-2026-33116HighSystem.Security.Cryptography.Xml: Microsoft Security Advisory CVE-2026-33116 – .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2026-32178LowMicrosoft.NetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability CVE-2026-40312MediumMagick.NET-Q16-AnyCPU: ImageMagick has an off-by-one error in MSL decoder could result in crash CVE-2026-40311MediumMagick.NET-Q16-AnyCPU: ImageMagick has a heap-use-after-free via XMP profile could result in a crash when printing the values.CVE-2026-40310MediumMagick.NET-Q16-AnyCPU: ImageMagick has a heap out-of-bounds write in JP2 encoder CVE-2026-40183MediumMagick.NET-Q16-AnyCPU: ImageMagick has a heap buffer overflow when encoding JXL image with a 16-bit float CVE-2026-40169MediumMagick.NET-Q16-AnyCPU: ImageMagick has a heap buffer overflow (WRITE) in the YAML and JSON encoders.CVE-2026-33905MediumMagick.NET-Q16-AnyCPU: ImageMagick has an out-of-bounds read in sample operation CVE-2026-33902MediumMagick.NET-Q16-AnyCPU: ImageMagick has a Stack Overflow via Recursive FX Expression Parsing CVE-2026-33901HighMagick.NET-Q16-AnyCPU: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder CVE-2026-33908HighMagick.NET-Q16-AnyCPU: ImageMagick has a Stack Overflow in DestroyXMLTree()CVE-2026-33899MediumMagick.NET-Q16-AnyCPU: ImageMagick has a heap-Buffer-Overflow write of a single zero byte when parsing xml.CVE-2026-34238MediumMagick.NET-Q16-AnyCPU: ImageMagick has an integer overflow in despeckle operation causing a heap buffer overflow on 32-bit builds CVE-2026-33900MediumMagick.NET-Q16-AnyCPU: ImageMagick has a heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds CVE-2026-40306MediumDotNetNuke.Core: DNN: Same HostGUID for all new installs CVE-2026-40305MediumDotNetNuke.Core: DNN: Force Friend Request Acceptance CVE-2026-40321HighDotNetNuke.Core: DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload CVE-2026-40021Mediumlog4net: Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters CVE-2026-39959HighTmds.DBus: Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service GHSA-32WQ-PPWG-3W4MHighEnhancedLinq.Async: EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo