1877 matches found
CVE-2020-12448
GitLab EE 12.8 and later allows Exposure of Sensitive Information to an Unauthorized Actor via NuGet...
MAL-2025-2924 Malicious code in sharpdefender (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sharpdefender (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in seedefender (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2923 Malicious code in seedefender (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2922 Malicious code in markdown-to-html (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in markdown-to-html (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.
Summary Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak. Red Hat is used by IBM Robotic Process Automation for Cloud Pak as part of base container images. CVE-2016-4074. getaddrinfo is used by IBM Robotic Process Automation for Cloud Pak as part of the ba...
CVE-2025-26620
Duende.AccessTokenManagement is a set of .NET libraries that manage OAuth and OpenId Connect access tokens. Duende.AccessTokenManagement contains a race condition when requesting access tokens using the client credentials flow. Concurrent requests to obtain an access token using differing protoco...
CVE-2025-26620 Duende.AccessTokenManagement race condition when concurrently retrieving customized Client Credentials Access Tokens
Duende.AccessTokenManagement is a set of .NET libraries that manage OAuth and OpenId Connect access tokens. Duende.AccessTokenManagement contains a race condition when requesting access tokens using the client credentials flow. Concurrent requests to obtain an access token using differing protoco...
PT-2025-7217 · Duende · Duende.Accesstokenmanagement
Name of the Vulnerable Software and Affected Versions: Duende.AccessTokenManagement affected versions not specified Description: Duende.AccessTokenManagement contains a race condition when requesting access tokens using the client credentials flow. Concurrent requests to obtain an access token...
CVE-2022-0243
Cross-site Scripting XSS - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2...
CVE-2020-5261
Saml2 Authentication services for ASP.NET NuGet package Sustainsys.Saml2 greater than 2.0.0, and less than version 2.5.0 has a faulty implementation of Token Replay Detection. Token Replay Detection is an important defence in depth measure for Single Sign On solutions. The 2.5.0 version is patche...
CVE-2024-47604
NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which allows an attacker to execute arbitrary HTML or Javascript code in a victim's browser...
MAL-2025-893 Malicious code in Microsofft.EntetyFrameworkCore (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Microsofft.EntetyFrameworkCore (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-895 Malicious code in Mircоsoft.EntetyFrameworkCore (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Mircоsoft.EntetyFrameworkCore (NuGet)
--- -= Per source details. Do not edit below this line.=-...