NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-MVM6-F9R3-FGFXHighAWSSDK.CloudFront: AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction GHSA-9R56-3GJQ-HQF7LowMagick.NET-Q16-AnyCPU: ImageMagick: META reader memory leak in the APP1JPEG input path GHSA-6P22-Q7W5-33PGLowMagick.NET-Q16-AnyCPU: ImageMagick has possible memory leak in ASHLAR coder when action fails CVE-2026-33536MediumMagick.NET-Q16-AnyCPU: ImageMagick has an Out-of-bounds Write via InterpretImageFilename CVE-2026-33535MediumMagick.NET-Q16-AnyCPU: ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction GHSA-XW6W-9JJH-P9CRMediumScriban: Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation GHSA-M2P3-HWV5-XPQWMediumScriban: Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString GHSA-XCX6-VP38-8HR5HighScriban: Scriban has Uncontrolled Recursion in `object.to_json` Causing Unrecoverable Process Crash via StackOverflowException GHSA-V66J-X4HW-FV9GHighScriban: Scriban: Uncontrolled Memory Allocation via string.pad_left/pad_right Allows Remote Denial of Service GHSA-C875-H985-HVRCHighscriban: Scriban: Built-in operations bypass LoopLimit and delay cancellation, enabling Denial of Service GHSA-5WR9-M6JW-XX44Criticalscriban: Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuse GHSA-X6M9-38VM-2XHFHighscriban: Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset() GHSA-P6Q4-FGR8-VX4PHighScriban: Scriban has a Stack Overflow via Nested Array Initializers That Bypass the ExpressionDepthLimit Fix GHSA-5RPF-X9JG-8J5PMediumscriban: Scriban Affected by Memory Exhaustion (OOM) via Unbounded String Generation (Denial of Service)GHSA-GRR9-747V-XVCPHighscriban: Scriban has an Infinite Recursion during Object Rendering Leads to Stack Overflow and Process Crash (Denial of Service)GHSA-WGH7-7M3C-FX25Highscriban: Scriban has Uncontrolled Recursion in Parser Leads to Stack Overflow and Process Crash (Denial of Service)CVE-2026-32636MediumMagick.NET-Q16-AnyCPU: ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash CVE-2026-32933HighAutoMapper: AutoMapper Vulnerable to Denial of Service (DoS) via Uncontrolled Recursion GHSA-8FH9-C4JQ-94H4Highidunno.AtProto: idunno.Bluesky, idunno.AtProto and idunno.AtProto.OAuthCallback Denial of Service Vulnerability CVE-2023-1289MediumMagick.NET-Q16-AnyCPU: ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS CVE-2026-30937MediumMagick.NET-Q16-AnyCPU: ImageMagick has heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation CVE-2026-30936MediumMagick.NET-Q16-AnyCPU: ImageMagick has Heap Buffer Overflow in WaveletDenoiseImage CVE-2026-30935MediumMagick.NET-Q16-AnyCPU: ImageMagick has Heap Buffer Over-Read in BilateralBlurImage CVE-2026-30931MediumMagick.NET-Q16-AnyCPU: ImageMagick has heap-based buffer overflow in UHDR encoder CVE-2026-30929HighMagick.NET-Q16-AnyCPU: ImageMagick has stack buffer overflow in MagnifyImage

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo