- GHSA-23rf-6693-g89p (2026-07-30)
- Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability
- GHSA-8q5v-6pqq-x66h (2026-07-30)
- Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability
- GHSA-464c-974j-9xm6 (2026-07-30)
- AWS CDK CodeBuild S3 Log Encryption Boolean Inversion
- GHSA-cvvh-rhrc-wg4q (2026-07-30)
- Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability
- GHSA-g8r8-53c2-pm3f (2026-07-30)
- Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability
- GHSA-mmjf-rqrv-855v (2026-07-30)
- Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability
- GHSA-6c8g-7p36-r338 (2026-05-06)
- SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant)
- GHSA-pggp-6c3x-2xmx (2026-04-28)
- Snappier has an infinite loop during SnappyStream decompression with malformed framed input
- GHSA-4625-4j76-fww9 (2026-04-27)
- OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter
- GHSA-g94r-2vxg-569j (2026-04-23)
- OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers
- GHSA-q834-8qmm-v933 (2026-04-23)
- OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies
- GHSA-mr8r-92fq-pj8p (2026-04-23)
- OpenTelemetry dotnet: Unbounded
grpc-status-details-binparsing in OTLP/gRPC retry handling
- OpenTelemetry dotnet: Unbounded
- GHSA-g4vj-cjjj-v7hg (2026-04-14)
- Defense in Depth update for NuGet Client
- GHSA-w3x6-4m5h-cxqf (2026-04-14)
- Microsoft Security Advisory CVE-2026-26171 - .NET Denial of Service Vulnerability
- GHSA-37gx-xxp4-5rgx (2026-04-14)
- Microsoft Security Advisory CVE-2026-33116 - .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
- GHSA-9cvc-h2w8-phrp (2026-01-08)
- AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value
- Security Advisory (2022-12-06)
- System.Security.Cryptography.Xml vulnerability (CVE-2022-34716) in NServiceBus