VulnerabilityPublished 25 Jun 2024Updated 20 Jul 2026

OCI.DotNetSDK.Ai.vision (NuGet) · Malicious Code

Affects OCI.DotNetSDK.Ai.visionSource GCVE Database

Severity

High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:11 UTC

What to do

Affected software

Product	Affected	Fixed in
NuGetOCI.DotNetSDK.Ai.vision`pkg:nuget/OCI.DotNetSDK.Ai.vision`Other threats	Affected =73.0.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Avoid using OCI.DotNetSDK.Ai.vision version 73.0.0. Monitor vendor advisories or the NuGet repository for updates or official fixes.

Description

The OCI.DotNetSDK.Ai.vision package version 73.0.0 on NuGet has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting any software that incorporates this specific version. No CVSS score or detailed technical exploitation information is available.

Impact

Using the malicious package version 73.0.0 could lead to compromise of the software supply chain, potentially allowing attackers to execute arbitrary code or perform unauthorized actions within applications that depend on this package. The exact impact is not detailed in the source data.

Summary

The OCI.DotNetSDK.Ai.vision NuGet package version 73.0.0 is flagged as malicious according to the OpenSSF malicious packages database (MAL-2024-4582). This indicates that the package contains harmful code that could compromise systems using it. There is no detailed vulnerability or exploit information provided, nor any known exploits in the wild. The threat is specific to this exact version of the package.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 20 Jul 2026, 20:11 UTC

Technical details

References

Community reviews