Skip to main content
VulnerabilityPublished Updated

Wpf.UI.WinForms (NuGet) · Malicious Code

Affects Wpf.UI.WinFormsSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 20 Jul 2026, 19:58 UTC

What to do

Affected software

ProductAffectedFixed in
NuGetWpf.UI.WinFormspkg:nuget/Wpf.UI.WinFormsOther threatsAffected
  • =6.1.0
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Remove or replace this package version with a trusted alternative. Monitor official advisories or the NuGet repository for updates or removal of the malicious package.

Description

The Wpf.UI.WinForms NuGet package version 6.1.0 contains malicious code as identified by the OpenSSF malicious packages project. This is a supply chain threat where the package itself is compromised to include harmful functionality. No CVSS score or detailed technical exploit information is provided.

References

Community reviews

Loading reviews…