VulnerabilityPublished 25 Jun 2024Updated 20 Jul 2026

Modern.UI2.WPF (NuGet) · Malicious Code

Affects Modern.UI2.WPFSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:13 UTC

What to do

Affected software

Product	Affected	Fixed in
NuGetModern.UI2.WPF`pkg:nuget/Modern.UI2.WPF`Other threats	Affected =1.0.9	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using Modern.UI2.WPF version 1.0.9. Monitor vendor or repository advisories for updates or remediation guidance.

Description

The Modern.UI2.WPF NuGet package version 1.0.9 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No specific technical details about the nature of the malicious code or its impact are provided in the source data.

Impact

Users who install Modern.UI2.WPF version 1.0.9 may inadvertently introduce malicious code into their software environments. This can lead to compromise depending on the payload and intent of the malicious code, though no specific impact details or exploit reports are available. There are no known exploits in the wild at this time.

Summary

Modern.UI2.WPF version 1.0.9 is identified as a malicious package in the NuGet ecosystem. The detection is credited to OpenSSF and documented in the malicious packages repository. There is no CVSS score or detailed vulnerability description available. The package is flagged for containing malicious code, representing a supply chain risk to users who install this specific version.

References

github.com/advisories/GHSA-cg7h-2h58-w3xx (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 20 Jul 2026, 20:13 UTC

Technical details

References

Community reviews