The Modern.UI2.WinForm package version 1.4.0 on NuGet has been identified as containing malicious code. This is a case of a malicious package rather than a traditional vulnerability. No CVSS score or detailed technical exploit information is provided. There are no known exploits in the wild at this time.