Skip to main content
VulnerabilityPublished Updated

OCI.DotNetSDK.Waf.Net (NuGet) · Malicious Code

Affects OCI.DotNetSDK.Waf.NetSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 20 Jul 2026, 20:09 UTC

What to do

Affected software

ProductAffectedFixed in
NuGetOCI.DotNetSDK.Waf.Netpkg:nuget/OCI.DotNetSDK.Waf.NetOther threatsAffected
  • =73.0.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

It is recommended to remove or replace this package with a trusted alternative or a clean version if available. Monitor vendor or repository advisories for updates or fixes.

Description

The OCI.DotNetSDK.Waf.Net package version 73.0.0 on NuGet contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat involving a compromised or intentionally malicious package distributed via a popular package manager.

References

Community reviews

Loading reviews…