NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-28693HighMagick.NET-Q16-AnyCPU: ImageMagick: Integer overflow in DIB coder can result in out of bounds read or write CVE-2026-28691HighMagick.NET-Q16-AnyCPU: ImageMagick has uninitialized pointer dereference in JBIG decoder CVE-2026-28690MediumMagick.NET-Q16-AnyCPU: ImageMagick has stack write buffer overflow in MNG encoder CVE-2026-28688MediumMagick.NET-Q16-AnyCPU: ImageMagick has heap use-after-free in the MSL encoder CVE-2026-28687MediumMagick.NET-Q16-AnyCPU: ImageMagick has Heap Use-After-Free in ImageMagick MSL decoder CVE-2026-28686MediumMagick.NET-Q16-AnyCPU: ImageMagick: Write heap-buffer-overflow in PCL encoder via undersized output buffer CVE-2026-28494HighMagick.NET-Q16-AnyCPU: ImageMagick vulnerable to stack corruption through long morphology kernel names or arrays CVE-2026-28493MediumMagick.NET-Q16-AnyCPU: ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder CVE-2026-26284MediumMagick.NET-Q16-AnyCPU: ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.CVE-2026-25986MediumMagick.NET-Q16-AnyCPU: ImageMagick has heap buffer overflow in YUV 4:2:2 decoder CVE-2026-25982MediumMagick.NET-Q16-AnyCPU: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)CVE-2026-25971MediumMagick.NET-Q16-AnyCPU: ImageMagick: MSL - Stack overflow in ProcessMSLScript CVE-2026-25970MediumMagick.NET-Q16-AnyCPU: ImageMagick Has Signed Integer Overflow in SIXEL Decoder, Leading to Memory Corruption CVE-2026-25968HighMagick.NET-Q16-AnyCPU: ImageMagick: MSL attribute stack buffer overflow leads to out of bounds write. CVE-2026-26127HighMicrosoft.Bcl.Memory: .NET Denial of Service Vulnerability CVE-2026-26130HighMicrosoft.AspNetCore.App.Runtime.linux-arm: .NET Denial of Service Vulnerability CVE-2026-26131HighMicrosoft.NetCore.App.Runtime.linux-arm: .NET Elevation of Privilege Vulnerability CVE-2026-31834HighUmbraco.Cms: Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks CVE-2026-31833MediumUmbraco.Cms: Umbraco has Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering CVE-2026-31832MediumUmbraco.Cms: Umbraco Backoffice API Allows Unauthorized Modification of Domain Data CVE-2026-31853MediumMagick.NET-Q16-AnyCPU: ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder CVE-2026-30883MediumMagick.NET-Q16-AnyCPU: ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder CVE-2026-28692MediumMagick.NET-Q16-AnyCPU: ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder CVE-2026-28689MediumMagick.NET-Q16-AnyCPU: ImageMagick has a Path Policy TOCTOU symlink race bypass CVE-2026-26118HighAzure.Mcp: Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo