Threats Tagged 'nuget'

An integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read and that can result in a crash.

The Bunifu.Form NuGet package versions 1.0.0 through 1.0.49 and version 8.3.53 contain malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a malicious package distributed via NuGet.

The Discord_Rpc.Net NuGet package versions 1.0.0 through 1.0.49 and 1.2.1.24 through 1.2.1.25 contain malicious code. This is a supply chain threat where the package itself is identified as malicious. There is no CVSS score or detailed technical exploit information available.

The DiscordNetApi NuGet package versions 1.0.0 through 1.0.49 and 1.2.567 contain malicious code. This is a supply chain threat where the package itself is compromised with malicious content.

The NuGet package '86666757657658' version 2.6.8 has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious, potentially impacting any projects that incorporate it. No CVSS score or detailed technical exploitation information is provided.

The NuGet package AdamsLair.Duality.Core version 3.2.2 has been identified as containing malicious code. This is a supply chain threat where the package itself is compromised. No CVSS score or detailed technical exploitation information is available.

The NuGet package AdamsLair.Duality.Editor.Net version 3.1.9 contains malicious code as identified by the OpenSSF malicious packages database. This is a supply chain threat involving a compromised or intentionally harmful package distributed via the NuGet ecosystem. No official patch or remediation guidance is currently provided.

AeroWizard.Net version 2.3.1, a NuGet package, has been identified as containing malicious code. This is a supply chain threat where the package itself is malicious. There is no CVSS score or detailed technical exploit information available. No official patch or remediation guidance has been provided yet.

The AlgoTrading NuGet package contains malicious code in multiple specific versions. This threat involves the presence of intentionally harmful code within the package distributed via the NuGet ecosystem. There is no CVSS score available, and no official patch or remediation guidance has been provided. No known exploits in the wild have been reported.

The AlgoTrading.Net NuGet package contains malicious code in multiple specific versions. This threat involves the presence of harmful code within the package versions listed, which could compromise systems that incorporate these versions. There is no CVSS score available for this threat, and no detailed technical exploitation information is provided.