NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-48733MediumMagick.NET-Q16-AnyCPU: ImageMagick has an Infinite Loop in subimage-search with crafted image CVE-2026-48724MediumMagick.NET-Q16-AnyCPU: ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method CVE-2026-48517MediumMessagePack: MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic arguments CVE-2026-48516MediumMessagePack: MessagePack-CSharp: InterfaceLookupFormatter bypasses collision-resistant comparer settings CVE-2026-48515MediumMessagePack: MessagePack-CSharp: Multi-dimensional array formatters allocate from unchecked dimensions CVE-2026-48514MediumMessagePack: MessagePack-CSharp: Unity unsafe blit formatter allocates from unbounded byte length CVE-2026-48513MediumMessagePack: MessagePack-CSharp: DynamicUnionResolver-generated deserializers miss depth enforcement CVE-2026-48512MediumMessagePack: MessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcement CVE-2026-48511MediumMessagePack: MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted maps CVE-2026-48510MediumMessagePack: MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengths CVE-2026-48509MediumMessagePack: MessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodies CVE-2026-48506HighMessagePack: MessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depth CVE-2026-48502HighMessagePack: MessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows CVE-2026-54784HighCoreWCF.Primitives: CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality CVE-2026-54783HighCoreWCF.Primitives: CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages CVE-2026-54782CriticalCoreWCF.Primitives: CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation CVE-2026-54781HighCoreWCF.Primitives: CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced CVE-2026-54780LowCoreWCF.Primitives: CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass CVE-2026-54779MediumCoreWCF.Primitives: CoreWCF: SAML token replay protection is inoperative CVE-2026-54778MediumCoreWCF.UnixDomainSocket: CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution CVE-2026-54777MediumCoreWCF.NetNamedPipe: CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance CVE-2026-54776MediumCoreWCF.UnixDomainSocket: CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade CVE-2026-54775MediumCoreWCF.Kafka: CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.CVE-2026-54774HighCoreWCF.Primitives: CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate CVE-2026-54773MediumCoreWCF.Primitives: CoreWCF: WS-Security signature substitution via document-wide Signature lookup

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo