Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
.NET
.NET (Windows Presentation Foundation)
Deserialization of Untrusted Data
>= 6.0.0 <= 6.0.42
Aug 3, 2026
High
.NET
.NET (Windows Presentation Foundation)
Improper Control of Generation of Code ('Code Injection')
>= 6.0.0 <= 6.0.42
Aug 3, 2026
High
.NET
.NET
Allocation of Resources Without Limits or Throttling
>= 6.0.0 <= 6.0.42
Aug 3, 2026
High
.NET
.NET
Access of Resource Using Incompatible Type ('Type Confusion')
>= 6.0.0 <= 6.0.42
Aug 3, 2026
Medium
.NET
Azure Identity library for .NET (Azure.Identity)
Insufficiently Protected Credentials
Azure.Identity < 1.11.0
Jul 29, 2026
Medium
.NET
Azure Identity library for .NET
Concurrent Execution using Shared Resource with Improper Synchronization
Azure.Identity < 1.11.4
Jul 29, 2026
High
.NET
.NET (System.Text.Json)
Inefficient Algorithmic Complexity
System.Text.Json >= 6.0.0 < 6.0.10; System.Text.Json >= 8.0.0 < 8.0.5
Jul 29, 2026
High
.NET
MessagePack-CSharp
Use of Weak Hash
MessagePack < 2.5.187; MessagePack >= 2.6.95-alpha < 3.0.214-rc.1; NES Essentials Plus MessagePack fork (2.5.192.x): not affected.
Jul 29, 2026
High
.NET
MessagePack-CSharp
Improper Input Validation (4.16)
MessagePack < 2.5.301; MessagePack >= 3.0.214-rc.1 < 3.1.7; NES Essentials Plus MessagePack 2.5.192.x before 2.5.192.2
Jul 29, 2026
High
.NET
MessagePack-CSharp
Uncontrolled Recursion
MessagePack < 2.5.301; MessagePack >= 3.0 < 3.1.7; NES Essentials Plus MessagePack 2.5.192.x before 2.5.192.2
Jul 29, 2026
Medium
.NET
MessagePack-CSharp
Initialization of a Resource with an Insecure Default
MessagePack < 2.5.301; MessagePack >= 3.0 < 3.1.7; NES Essentials Plus MessagePack 2.5.192.x before 2.5.192.3
Jul 29, 2026
Medium
.NET
MessagePack-CSharp
Allocation of Resources Without Limits or Throttling
Improper Handling of Highly Compressed Data (Data Amplification)
MessagePack < 2.5.301; MessagePack >= 3.0 < 3.1.7; NES Essentials Plus MessagePack 2.5.192.x before 2.5.192.2
Jul 29, 2026
Medium
.NET
MessagePack-CSharp
Inefficient Algorithmic Complexity
MessagePack < 2.5.301; MessagePack >= 3.0 < 3.1.7; NES Essentials Plus MessagePack 2.5.192.x before 2.5.192.3
Jul 29, 2026
Medium
.NET
MessagePack-CSharp
Uncontrolled Recursion
MessagePack < 2.5.301; MessagePack >= 3.0 < 3.1.7; NES Essentials Plus MessagePack 2.5.192.x before 2.5.192.3
Jul 29, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.