https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:46:48.768973+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06585 bdu:2023-06585 2026-10-02T12:46:48.786222+00:00 bdu:2023-06585 https://cve.radiocsirt.org/vuln/bit-dotnet-2022-30184 BIT-dotnet-2022-30184 — .NET and Visual Studio Information Disclosure Vulnerability 2026-10-02T12:46:48.786272+00:00

Affected: Bitnami: dotnet

.NET and Visual Studio Information Disclosure Vulnerability

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-558 certfr-2022-avi-558 — Une vulnérabilité a été corrigée dans <span class="textit">Microsoft .Net</span>. Elle permet à un attaquant de provoqu… 2026-10-02T12:46:48.786306+00:00 certfr-2022-avi-558 https://cve.radiocsirt.org/vuln/cleanstart-2024-hp98221 CLEANSTART-2024-HP98221 — .NET and Visual Studio Information Disclosure Vulnerability 2026-10-02T12:46:48.786323+00:00

Affected: CleanStart: dotnet6-build, CleanStart: dotnet6-runtime

CVE-2022-30184 affects multiple packages. . See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-219988 EUVD-2026-219988 2026-10-02T12:46:48.786345+00:00 EUVD-2026-219988 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30184 fkie_cve-2022-30184 2026-10-02T12:46:48.786357+00:00

.NET and Visual Studio Information Disclosure Vulnerability

 https://cve.radiocsirt.org/vuln/ghsa-3885-8gqc-3wpf GHSA-3885-8gqc-3wpf — Potential leak of NuGet.org API key 2026-10-02T12:46:48.786376+00:00

Affected: NuGet: NuGet.Commands, NuGet: NuGet.CommandLine, NuGet: NuGet.CommandLine.XPlat

### Description

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0 and .NET Core 3.1, NuGet (NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat version range from 3.5.0 to 6.2.0). This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

A vulnerability exists in .NET 6.0, .NET Core 3.1, and NuGet (NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat version range from 3.5.0 to 6.2.0) where a nuget.org api key could leak due to an incorrect comparison with a server url.

### Affected software

#### NuGet & NuGet Packages

- Any NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat 6.2.0 version or earlier. - Any NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat 6.0.1 version or earlier. - Any NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat 5.11.1 version or earlier. - Any NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat 5.9.1 version or earlier. - Any NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat 5.7.1 version or earlier. - Any NuGet.exe, NuGet.Commands, NuGet.CommandLine, NuGet.CommandLine.XPlat 4.9.4 version or earlier.

#### .NET SDK(s)

- Any .NET 6.0 application running on .NET 6.0.5 or earlier. - Any .NET 3.1 application running on .NET Core 3.1.25 or earlier.

### Patches

- If you're using NuGet.exe 6.2.0 or low…

 https://cve.radiocsirt.org/vuln/gsd-2022-30184 gsd-2022-30184 2026-10-02T12:46:48.786439+00:00 gsd-2022-30184 https://cve.radiocsirt.org/vuln/icsa-23-320-12 ICSA-23-320-12 — Siemens PNI 2026-10-02T12:46:48.786451+00:00

.NET and Visual Studio Information Disclosure Vulnerability. zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference). NuGet Client Elevation of Privilege Vulnerability. .NET and Visual Studio Remote Code Execution Vulnerability .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability .NET DLL Hijacking Remote Code Execution Vulnerability .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability .NET and Visual Studio Elevation of Privilege Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability .NET and Visual Studio Remote Code Execution Vulnerability .NET and Visual Studio Elevation of Privilege Vulnerability

 https://cve.radiocsirt.org/vuln/msrc_cve-2022-30184 msrc_CVE-2022-30184 — .NET and Visual Studio Information Disclosure Vulnerability 2026-10-02T12:46:48.786480+00:00 msrc_CVE-2022-30184 https://cve.radiocsirt.org/vuln/rhsa-2022:5046 RHSA-2022:5046 — Red Hat Security Advisory: .NET 6.0 security and bugfix update 2026-10-02T12:46:48.786495+00:00

dotnet: NuGet Credential leak due to loss of control of third party symbol server domain

 https://cve.radiocsirt.org/vuln/rhsa-2022:5047 RHSA-2022:5047 — Red Hat Security Advisory: .NET 6.0 on RHEL 7 security and bugfix update 2026-10-02T12:46:48.786510+00:00

dotnet: NuGet Credential leak due to loss of control of third party symbol server domain