NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-25983MediumMagick.NET-Q16-AnyCPU: ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"CVE-2026-25969MediumMagick.NET-Q16-AnyCPU: Image Magick has a Memory Leak in coders/ashlar.c CVE-2026-25967HighMagick.NET-Q16-AnyCPU: ImageMagick: Stack buffer overflow in FTXT reader via oversized integer field CVE-2026-25966MediumMagick.NET-Q16-AnyCPU: ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access CVE-2026-25965HighMagick.NET-Q16-AnyCPU: ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy CVE-2026-25898MediumMagick.NET-Q16-AnyCPU: ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer CVE-2026-25897MediumMagick.NET-Q16-AnyCPU: ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write CVE-2026-25799MediumMagick.NET-Q16-AnyCPU: ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash CVE-2026-25798MediumMagick.NET-Q16-AnyCPU: ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image CVE-2026-25797MediumMagick.NET-Q16-AnyCPU: ImageMagick: Code Injection via PostScript header in ps coders CVE-2026-25796MediumMagick.NET-Q16-AnyCPU: ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths CVE-2026-25795MediumMagick.NET-Q16-AnyCPU: ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)CVE-2026-25794HighMagick.NET-Q16-AnyCPU: ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions CVE-2026-25638MediumMagick.NET-Q16-AnyCPU: ImageMagick has memory leak in msl encoder CVE-2026-25637MediumMagick.NET-Q16-AnyCPU: ImageMagick: Possible memory leak in ASHLAR encoder CVE-2026-25576MediumMagick.NET-Q16-AnyCPU: ImageMagick: Out of bounds read in multiple coders read raw pixel data CVE-2026-24485HighMagick.NET-Q16-AnyCPU: ImageMagick: Infinite loop vulnerability when parsing a PCD file CVE-2026-24484MediumMagick.NET-Q16-AnyCPU: ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS CVE-2026-24481HighMagick.NET-Q16-AnyCPU: ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression CVE-2026-21218HighSystem.Security.Cryptography.Cose: Microsoft Security Advisory CVE-2026-21218 | .NET Security Feature Bypass Vulnerability CVE-2026-25592Criticalsemantic-kernel: Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK CVE-2026-25543MediumHtmlSanitizer: HtmlSanitizer has a bypass via template tag CVE-2026-24687MediumUmbraco.Forms: Umbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac CVE-2026-24838CriticalDotNetNuke.Core: DotNetNuke.Core Vulnerable to Stored XSS via Module Title CVE-2026-24837HighDotNetNuke.Core: DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo