Vendor Intelligence
nuget
14 tracked CVEs · 0 in CISA KEV · 0 confirmed exploited in the wild.
CVE-2026-48109 · CVSS 8.2
MessagePack's LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input
View CVE report →
CVE-2026-50194 · CVSS 8.2
Steeltoe vulnerable to management-port isolation bypass via spoofed Host header
View CVE report →
CVE-2026-50528 · CVSS 8.2
Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability
View CVE report →
CVE-2026-47304 · CVSS 8.1
Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability
View CVE report →
CVE-2026-42899 · CVSS 7.5
Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability
View CVE report →
CVE-2026-44302 · CVSS 7.5
Snappier has an infinite loop during SnappyStream decompression with malformed framed input
View CVE report →
CVE-2026-47302 · CVSS 7.5
Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability
View CVE report →
CVE-2026-49451 · CVSS 7.5
Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing
View CVE report →
CVE-2026-50524 · CVSS 7.5
Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability
View CVE report →
CVE-2026-50525 · CVSS 7.5
Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability
View CVE report →
CVE-2026-50648 · CVSS 7.5
Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability
View CVE report →
CVE-2026-50651 · CVSS 7.5
Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability
View CVE report →
CVE-2026-57108 · CVSS 7.5
Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability
View CVE report →
CVE-2026-35433 · CVSS 7.3
Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability
View CVE report →