N
Vendor security profile
nuget
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs66
Critical6
CISA KEV0
Public exploit8
Patch rate%58
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
2
0
3
1
2
13
13
17
12
CVE KEV
CVE severity distribution
66toplam CVE
Critical6 (9%)
High41 (62%)
Medium16 (24%)
Low3 (5%)
Patch and exploitation view
%58
Verified patch
%0
CISA KEV
%12
Public exploit
38Patch available
0Partial
0Workaround
0Vendor: no patch
28Unknown
Latest vulnerabilities
7.5
CVE-2026-106118
ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write
S
Patch status unknownEPSS %1
7.5
CVE-2026-106117
ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp
S
Patch status unknownEPSS %0
5.3
CVE-2026-106116
ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop
S
Patch status unknownEPSS %0
7.5
CVE-2026-106115
ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer
S
Patch status unknownEPSS %0
5.3
CVE-2026-106114
ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions
S
Patch status unknownEPSS %0
7.5
CVE-2026-106113
ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index
S
Patch status unknownEPSS %0
7.5
CVE-2026-106112
ImageSharp: ICC LUT16 output channel count can write beyond Vector4
S
Patch status unknownEPSS %0
5.9
CVE-2026-106111
ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate
S
Patch status unknownEPSS %0
7.5
CVE-2026-106110
ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer
S
Patch status unknownEPSS %0
8.8
CVE-2026-105796
Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators
M
Patch status unknownEPSS %1