## Security Advisories
- [About](https://docs.particular.net/security-advisories/index.md)
- [Published Advisories](https://docs.particular.net/security-advisories/published-advisories.md)
- [Dependency Vulnerabilities](https://docs.particular.net/security-advisories/dependency-vulnerabilities.md)

## Other pages
- [Security Advisory 2022-12-06](https://docs.particular.net/security-advisories/cryptography-xml-vulnerability.md): System.Security.Cryptography.Xml vulnerability (CVE-2022-34716) in NServiceBus.
- [GHSA-23rf-6693-g89p](https://docs.particular.net/security-advisories/ghsa-23rf-6693-g89p.md): Microsoft Security Advisory CVE-2026-50648 - .NET Denial.
- [GHSA-37gx-xxp4-5rgx](https://docs.particular.net/security-advisories/ghsa-37gx-xxp4-5rgx.md): Microsoft Security Advisory CVE-2026-33116 - .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability.
- [GHSA-4625-4j76-fww9](https://docs.particular.net/security-advisories/ghsa-4625-4j76-fww9.md): OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter.
- [GHSA-464c-974j-9xm6](https://docs.particular.net/security-advisories/ghsa-464c-974j-9xm6.md): AWS CDK CodeBuild S3 Log Encryption Boolean Inversion..
- [GHSA-6c8g-7p36-r338](https://docs.particular.net/security-advisories/ghsa-6c8g-7p36-r338.md): SharpCompress has directory traversal via directory entries in WriteToDirectory (zip slip variant).
- [GHSA-8q5v-6pqq-x66h](https://docs.particular.net/security-advisories/ghsa-8q5v-6pqq-x66h.md): Microsoft Security Advisory CVE-2026-50525 – .NET Denial.
- [GHSA-9cvc-h2w8-phrp](https://docs.particular.net/security-advisories/ghsa-9cvc-h2w8-phrp.md): AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value.
- [GHSA-cvvh-rhrc-wg4q](https://docs.particular.net/security-advisories/ghsa-cvvh-rhrc-wg4q.md): Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability.
- [GHSA-g4vj-cjjj-v7hg](https://docs.particular.net/security-advisories/ghsa-g4vj-cjjj-v7hg.md): Defense in Depth update for NuGet Client.
- [GHSA-g8r8-53c2-pm3f](https://docs.particular.net/security-advisories/ghsa-g8r8-53c2-pm3f.md): Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability.
- [GHSA-g94r-2vxg-569j](https://docs.particular.net/security-advisories/ghsa-g94r-2vxg-569j.md): OpenTelemetry dotnet: Excessive memory allocation when parsing OpenTelemetry propagation headers.
- [GHSA-mmjf-rqrv-855v](https://docs.particular.net/security-advisories/ghsa-mmjf-rqrv-855v.md): Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability.
- [GHSA-mr8r-92fq-pj8p](https://docs.particular.net/security-advisories/ghsa-mr8r-92fq-pj8p.md): OpenTelemetry dotnet: Unbounded `grpc-status-details-bin` parsing in OTLP/gRPC retry handling.
- [GHSA-pggp-6c3x-2xmx](https://docs.particular.net/security-advisories/ghsa-pggp-6c3x-2xmx.md): Snappier has an infinite loop during SnappyStream decompression with malformed framed input.
- [GHSA-q834-8qmm-v933](https://docs.particular.net/security-advisories/ghsa-q834-8qmm-v933.md): OpenTelemetry dotnet: OTLP exporter reads unbounded HTTP response bodies.
- [GHSA-w3x6-4m5h-cxqf](https://docs.particular.net/security-advisories/ghsa-w3x6-4m5h-cxqf.md): Microsoft Security Advisory CVE-2026-26171 - .NET Denial of Service Vulnerability.
- [Security Advisory 2017-01-10](https://docs.particular.net/security-advisories/msmq-permissions.md): MSMQ permissions vulnerability.
- [Security Advisory 2020-03-11](https://docs.particular.net/security-advisories/servicepulse-directorytraversal.md): ServicePulse directory traversal vulnerability.
- [Security Advisory 2016-07-05](https://docs.particular.net/security-advisories/sqlserver-sqlinjection.md): NServiceBus SQL Server Transport injection vulnerability.