System.Security.Cryptography.Xml (NuGet)
Advisories
43
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 11.0.0-rc.2 or later clears every advisory below that has a fix.
Upgrade commands
dotnet
dotnet add package System.Security.Cryptography.Xml --version 11.0.0-rc.2Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-7hqp-7c5m-4vq6 Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.20% |
>= 8.0.0, < 8.0.5 | 8.0.5 |
| GHSA-7hqp-7c5m-4vq6 Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.20% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-7hqp-7c5m-4vq6 Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.20% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-7hqp-7c5m-4vq6 Microsoft Security Advisory CVE-2026-96960 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.20% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-c399-9853-6jmj Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 0.97% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-c399-9853-6jmj Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 0.97% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-c399-9853-6jmj Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 0.97% |
>= 8.0.0, < 8.0.5 | 8.0.5 |
| GHSA-c399-9853-6jmj Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 0.97% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-r955-8q5j-3h83 Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.20% |
>= 8.0.0, < 8.0.5 | 8.0.5 |
| GHSA-r955-8q5j-3h83 Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.20% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-r955-8q5j-3h83 Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.20% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-r955-8q5j-3h83 Microsoft Security Advisory CVE-2026-96958 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.20% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-vrv5-2jg9-4mmr Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing Vulnerability |
High EPSS 0.59% |
>= 8.0.0, < 8.0.5 | 8.0.5 |
| GHSA-23rf-6693-g89p Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 8.0.0, < 8.0.4 | 8.0.4 |
| GHSA-23rf-6693-g89p Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-23rf-6693-g89p Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-mmjf-rqrv-855v Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-mmjf-rqrv-855v Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 8.0.0, < 8.0.4 | 8.0.4 |
| GHSA-mmjf-rqrv-855v Microsoft Security Advisory CVE-2026-50527 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-8q5v-6pqq-x66h Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-8q5v-6pqq-x66h Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-8q5v-6pqq-x66h Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 8.0.0, < 8.0.4 | 8.0.4 |
| GHSA-g8r8-53c2-pm3f Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability |
Critical EPSS 0.29% |
>= 8.0.0, < 8.0.4 | 8.0.4 |
| GHSA-g8r8-53c2-pm3f Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability |
Critical EPSS 0.29% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-g8r8-53c2-pm3f Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability |
Critical EPSS 0.29% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-cvvh-rhrc-wg4q Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-cvvh-rhrc-wg4q Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 8.0.0, < 8.0.4 | 8.0.4 |
| GHSA-cvvh-rhrc-wg4q Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-37gx-xxp4-5rgx Microsoft Security Advisory CVE-2026-33116 – .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability |
High EPSS 2.14% |
>= 8.0.0, < 8.0.3 | 8.0.3 |
| GHSA-37gx-xxp4-5rgx Microsoft Security Advisory CVE-2026-33116 – .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability |
High EPSS 2.14% |
>= 10.0.0, < 10.0.6 | 10.0.6 |
| GHSA-37gx-xxp4-5rgx Microsoft Security Advisory CVE-2026-33116 – .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability |
High EPSS 2.14% |
>= 9.0.0, < 9.0.15 | 9.0.15 |
| GHSA-6588-8gv4-xfgh Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.90% |
>= 8.0.0, < 8.0.3 | 8.0.3 |
| GHSA-6588-8gv4-xfgh Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.90% |
>= 9.0.0, < 9.0.15 | 9.0.15 |
| GHSA-6588-8gv4-xfgh Microsoft Security Advisory CVE-2026-32203 – .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.90% |
>= 10.0.0, < 10.0.6 | 10.0.6 |
| GHSA-w3x6-4m5h-cxqf Microsoft Security Advisory CVE-2026-26171 – .NET Denial of Service Vulnerability |
High EPSS 1.75% |
>= 9.0.0, < 9.0.15 | 9.0.15 |
| GHSA-w3x6-4m5h-cxqf Microsoft Security Advisory CVE-2026-26171 – .NET Denial of Service Vulnerability |
High EPSS 1.75% |
>= 10.0.0, < 10.0.6 | 10.0.6 |
| GHSA-w3x6-4m5h-cxqf Microsoft Security Advisory CVE-2026-26171 – .NET Denial of Service Vulnerability |
High EPSS 1.75% |
>= 8.0.0, < 8.0.3 | 8.0.3 |
| GHSA-vh55-786g-wjwj .NET Information Disclosure Vulnerability |
Medium EPSS 2.50% |
< 4.7.1 | 4.7.1 |
| GHSA-vh55-786g-wjwj .NET Information Disclosure Vulnerability |
Medium EPSS 2.50% |
>= 5.0.0, < 6.0.1 | 6.0.1 |
| GHSA-2m65-m22p-9wjw Duplicate Advisory: .NET Information Disclosure Vulnerability Withdrawn |
Medium | < 4.7.1 | 4.7.1 |
| GHSA-2m65-m22p-9wjw Duplicate Advisory: .NET Information Disclosure Vulnerability Withdrawn |
Medium | >= 5.0.0, < 6.0.1 | 6.0.1 |
| GHSA-35hc-x2cw-2j4v Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents |
High EPSS 8.12% |
< 4.4.2 | 4.4.2 |
| GHSA-rr3c-f55v-qhv5 Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents |
High EPSS 8.88% |
< 4.4.2 | 4.4.2 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor