Zendesk.OAuth (NuGet) · Malicious Code
Affects Zendesk.OAuthSource GCVE Database
Rated by Threat Radar
Data as of 20 Jul 2026, 19:57 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
NuGetZendesk.OAuthpkg:nuget/Zendesk.OAuthOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should avoid using the affected versions (=7.0.4, =7.0.5, =7.0.6, =7.0.7) of the Zendesk.OAuth package. It is recommended to verify package integrity and source authenticity before use. Monitor vendor channels or the NuGet repository for updates or official advisories regarding this issue.
Description
The Zendesk.OAuth NuGet package versions 7.0.4, 7.0.5, 7.0.6, and 7.0.7 contain malicious code as identified by the OpenSSF and reported in the GCVE database. This is a supply chain threat involving a malicious package distributed via the NuGet ecosystem. No CVSS score or detailed technical exploitation information is provided.