NuGet - OSV

GHSA-jjfr-hcj7-qf5w

NuGet/SixLabors.ImageSharp

ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer 4 days ago

Fix available
Severity - 7.5 (High)

GHSA-4q3p-rj5x-xv7p

NuGet/SixLabors.ImageSharp

ImageSharp: EXR ZIP decoder can expose stale allocator data after a short... 4 days ago

Fix available
Severity - 5.9 (Medium)

GHSA-ffp7-56pq-64mr

NuGet/SixLabors.ImageSharp

ImageSharp: ICC LUT16 output channel count can write beyond Vector4 4 days ago

Fix available
Severity - 7.5 (High)

GHSA-wmxv-xphr-5c9g

NuGet/SixLabors.ImageSharp

ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing... 4 days ago

Fix available
Severity - 5.3 (Medium)

GHSA-j9gm-c75j-xc9q

NuGet/SixLabors.ImageSharp

ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer 4 days ago

Fix available
Severity - 7.5 (High)

GHSA-j3p4-wp97-rph4

NuGet/SixLabors.ImageSharp

ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked... 4 days ago

Fix available
Severity - 7.5 (High)

GHSA-gwg2-r3hj-4w44

NuGet/SixLabors.ImageSharp

ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid... 4 days ago

Fix available
Severity - 5.3 (Medium)

GHSA-v76p-62qx-wwq2

NuGet/ImageSharp

ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor... 4 days ago

Fix available
Severity - 7.5 (High)

GHSA-jj3q-cwqj-842r

NuGet/ImageSharp

ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits... 4 days ago

Fix available
Severity - 7.5 (High)

GHSA-6gw6-rv2g-25mg

NuGet/Microsoft.OpenApi.Kiota
NuGet/Microsoft.OpenApi.Kiota.Builder

Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin... 5 days ago

Fix available
Severity - 3.1 (Low)

GHSA-rm89-rhwj-9j92

NuGet/Microsoft.OpenApi.Kiota
NuGet/Microsoft.OpenApi.Kiota.Builder

Kiota: Code injection through doc-comment delimiter reformation in Kiota Java... 5 days ago

Fix available
Severity - 8.8 (High)

GHSA-w5f4-fx9m-m4q7

NuGet/Microsoft.Native.Quic.MsQuic.OpenSSL

MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL 5 days ago

Fix available
Severity - 9.1 (Critical)

GHSA-wrvw-254r-wpmv

NuGet/AlastairLundy.CliInvoke.Specializations
NuGet/CliInvoke.Specializations

CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers 25 Sep

Fix available
Severity - 8.4 (High)

GHSA-j73w-8hfr-4gc9

NuGet/AlastairLundy.CliInvoke
NuGet/CliInvoke

CliInvoke: Argument Injection in Extensibility Runner Factory 25 Sep

Fix available
Severity - 8.4 (High)

GHSA-7952-gx68-cjqr

Maven/net.sf.mpxj:mpxj
NuGet/MPXJ.Net
NuGet/net.sf.mpxj
NuGet/net.sf.mpxj-for-csharp
NuGet/net.sf.mpxj-for-vb
... 2 more

MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers 22 Sep

Fix available
Severity - 5.3 (Medium)

GHSA-5vvx-3h34-f3gj

Maven/net.sf.mpxj:mpxj
NuGet/MPXJ.Net
NuGet/net.sf.mpxj
NuGet/net.sf.mpxj-for-csharp
NuGet/net.sf.mpxj-for-vb
... 2 more

MPXJ: XXE Vulnerability in MerlinReader 22 Sep

Fix available
Severity - 7.5 (High)

Vulnerabilities