deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-gxr4-xjj5-5px2
Package: jquery (NUGET)
Severity: MODERATE (CVSS 6.9)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 1.12.0, < 3.5.0
Patched in: 3.5.0

Summary: Potential XSS vulnerability in jQuery

Details:
### Impact
Passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. `.html()`, `.append()`, and others) may execute untrusted code.

### Patches
This problem is patched in jQuery 3.5.0.

### Workarounds
To workaround the issue without upgrading, adding the following to your code:

```js
jQuery.htmlPrefilter = function( html ) {
	return html;
};
```

You need to use at least jQuery 1.12/2.2 or newer to be able to apply this workaround.

### References
https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
https://jquery.com/upgrade-guide/3.5/

### For more information
If you have any questions or comments about this advisory, search for a relevant issue in [the jQuery repo](https://github.com/jquery/jquery/issues). If you don't find an answer, open a new issue.
GitHub Security Advisory: GHSA-2rhw-gw3f-477j
Package: DotNetNuke.Core (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-330: Use of Insufficiently Random Values
Vulnerable versions: >= 10.0.0, < 10.2.2
Patched in: 10.2.2

Summary: DNN: Same HostGUID for all new installs

Details:
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. All new installations of DNN 10.x.x - 10.2.1 have the same Host GUID. This does not affect upgrades from 9.x.x. Version 10.2.2 patches the issue.
GitHub Security Advisory: GHSA-fpj4-9qhx-5m6m
Package: DotNetNuke.Core (NUGET)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 6.0.0, < 10.2.2
Patched in: 10.2.2

Summary: DNN: Force Friend Request Acceptance

Details:
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Starting in version 6.0.0 and prior to version 10.2.2, in the friends feature, a user could craft a request that would force the acceptance of a friend request on another user. Version 10.2.2 patches the issue.
GitHub Security Advisory: GHSA-ffq7-898w-9jc4
Package: DotNetNuke.Core (NUGET)
Severity: HIGH (CVSS 8.0)
CWE: CWE-87: Improper Neutralization of Alternate XSS Syntax
Vulnerable versions: < 10.2.2
Patched in: 10.2.2

Summary: DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload

Details:
DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.2.2, a user could upload a specially crafted SVG file that could include scripts that can target both authenticated and unauthenticated DNN users. The impact is increased if the scripts are run by a power user. Version 10.2.2 patches the issue.
GitHub Security Advisory: GHSA-xrw6-gwf8-vvr9
Package: Tmds.DBus.Protocol (NUGET)
Severity: HIGH (CVSS 7.1)
CWE: CWE-290: Authentication Bypass by Spoofing, CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: >= 0.22.0, < 0.92.0
Patched in: 0.92.0

Summary: Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service

Details:
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext.

### Patches

The vulnerabilities are fixed in version 0.92.0.
For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3.

### Workarounds

There are no known workarounds. Users should upgrade to a patched version.
GitHub Security Advisory: GHSA-xrw6-gwf8-vvr9
Package: Tmds.DBus.Protocol (NUGET)
Severity: HIGH (CVSS 7.1)
CWE: CWE-290: Authentication Bypass by Spoofing, CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: < 0.21.3
Patched in: 0.21.3

Summary: Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service

Details:
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext.

### Patches

The vulnerabilities are fixed in version 0.92.0.
For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3.

### Workarounds

There are no known workarounds. Users should upgrade to a patched version.
GitHub Security Advisory: GHSA-xrw6-gwf8-vvr9
Package: Tmds.DBus (NUGET)
Severity: HIGH (CVSS 7.1)
CWE: CWE-290: Authentication Bypass by Spoofing, CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: < 0.92.0
Patched in: 0.92.0

Summary: Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service

Details:
Tmds.DBus and Tmds.DBus.Protocol are vulnerable to malicious D-Bus peers. A peer on the same bus can spoof signals by impersonating the owner of a well-known name, exhaust system resources or cause file descriptor spillover by sending messages with an excessive number of Unix file descriptors, and crash the application by sending malformed message bodies that cause unhandled exceptions on the SynchronizationContext.

### Patches

The vulnerabilities are fixed in version 0.92.0.
For Tmds.DBus.Protocol, the fixes are also backported to 0.21.3.

### Workarounds

There are no known workarounds. Users should upgrade to a patched version.
GitHub Security Advisory: GHSA-vhqj-f5cj-9x8h
Package: Magick.NET-Q8-x64 (NUGET)
Severity: HIGH (CVSS 8.2)
CWE: CWE-122: Heap-based Buffer Overflow, CWE-190: Integer Overflow or Wraparound
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions

Details:
`WriteUHDRImage` in `coders/uhdr.c` uses `int` arithmetic to compute the pixel buffer size. When image dimensions are large, the multiplication overflows 32-bit `int`, causing an undersized heap allocation followed by an out-of-bounds write. This can crash the process or potentially lead to an out of bounds heap write.
```
==1575126==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x7fc382ef3820 at pc 0x5560d31f229f bp 0x7ffe865f9530 sp 0x7ffe865f9520
WRITE of size 8 at 0x7fc382ef3820 thread T0
    #0 0x5560d31f229e in WriteUHDRImage coders/uhdr.c:807
```
GitHub Security Advisory: GHSA-32wq-ppwg-3w4m
Package: EnhancedLinq.Async (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-129: Improper Validation of Array Index, CWE-1395: Dependency on Vulnerable Third-Party Component
Vulnerable versions: >= 1.0.0-beta.1, < 1.0.0-beta.3
Patched in: 1.0.0-beta.3

Summary: EnhancedLinq.Async is Vulnerable to Denial of Service via Transitive Dependency Microsoft.Bcl.Memory

Details:
### Impact
`Microsoft.Bcl.Memory`, a transitive dependency of `EnhancedLinq.Async`, had a Denial of Service security vulnerability, [CVE-2026-26127](https://github.com/dotnet/announcements/issues/384), thus affecting `EnhancedLinq.Async` versions that had vulnerable versions of `Microsoft.Bcl.Memory` as a transitive dependency.

### Patches
`EnhancedLinq.Async` 1.0.0 Beta 3 updates the dependency on `System.Linq.AsyncEnumerable` to version 10.0.4 or newer which in turn updates the transitive dependency on `Microsoft.Bcl.Memory` from version 10.0.3 to 10.0.4 or newer, resolving the vulnerability.

### Workarounds
No workarounds exist for this vulnerability.

### How to fix the issue

To update the `EnhancedLinq.Async` NuGet package, use one of the following methods:

**NuGet Package Manager UI in Visual Studio:**
- Open the project in Visual Studio.
- Right-click on the project in Solution Explorer and select "Manage NuGet Packages..." or navigate to "Project > Manage NuGet Packages".
- In the NuGet Package Manager window, select the "Updates" tab. This tab lists packages with available updates from configured package sources.
- Select the package(s) to update. A specific version can be chosen from the dropdown, or the latest available version can be selected.
- Click the "Update" button.

**Using the NuGet Package Manager Console in Visual Studio:**
- Open the project in Visual Studio.
- Navigate to "Tools > NuGet Package Manager > Package Manager Console".
- To update a specific package to its latest version, use the following Update-Package command:

```
Update-Package -Id EnhancedLinq.Async
```

**Using the .NET CLI (Command Line Interface):**
- Open a terminal or command prompt in the project's directory.
- To update a specific package to its latest version, use the following add package command:

```
dotnet package update EnhancedLinq.Async
```

Once the NuGet package reference has been updated, the application must be recompiled and redeployed.
GitHub Security Advisory: GHSA-mvm6-f9r3-fgfx
Package: AWSSDK.Extensions.CloudFront.Signers (NUGET)
Severity: HIGH (CVSS 0.0)
CWE: CWE-20: Improper Input Validation, CWE-116: Improper Encoding or Escaping of Output
Vulnerable versions: >= 4.0.0.0, < 4.0.0.26
Patched in: 4.0.0.26

Summary: AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction

Details:
### Summary 
This notification is related to the CloudFront signing utilities in the AWS SDK for .NET, which are used to generate Amazon CloudFront signed URLs and signed cookies. A defense-in-depth enhancement has been implemented to improve handling of special characters, such as double quotes and backslashes, in input values. 

### Impact 
The CloudFront signing utilities build policy documents that define access restrictions for signed URLs and cookies. If an application passes unsanitized input containing special characters to these utilities, the resulting policy document may not reflect the application's intended access restrictions. While the SDK was functioning safely within the requirements of the shared responsibility model, additional safeguards have been added to support secure customer implementations. Applications that already follow AWS security best practices for input validation are not impacted. 

### Impacted versions: 
- AWS SDK for .NET V3 (`AWSSDK.CloudFront`): < 3.7.510.7
- AWS SDK for .NET V4 (`AWSSDK.Extensions.CloudFront.Signers`): 4.0.0.0 - 4.0.0.25 

### Patches 
On February 25th, 2026, an enhancement was made to the AWS SDK for .NET CloudFront signing utilities. The enhancement ensures that special characters in input values are correctly handled. We recommend upgrading to the latest version. 

### Workarounds 
No workarounds are needed, but customers should ensure that your application is following security best practices: 
- Implement proper input validation in your application code before passing values to CloudFront signing utilities 
- Update to the latest AWS SDK release on a regular basis 
- Follow AWS security best practices for SDK configuration

### References 
If there are any questions or comments about this advisory, contact AWS Security via our [vulnerability reporting page](https://aws.amazon.com/security/vulnerability-reporting) or directly via email to [aws-security@amazon.com](mailto:aws-security@amazon.com). Please do not create a public GitHub issue.

### Acknowledgement
AWS SDK for .NET thanks the Amazon Inspector Security Research team for identifying this issue and working through the coordinated process together.
GitHub Security Advisory: GHSA-mvm6-f9r3-fgfx
Package: AWSSDK.CloudFront (NUGET)
Severity: HIGH (CVSS 0.0)
CWE: CWE-20: Improper Input Validation, CWE-116: Improper Encoding or Escaping of Output
Vulnerable versions: < 3.7.510.7
Patched in: 3.7.510.7

Summary: AWS SDK for .NET: Improper escaping of special characters in CloudFront policy document construction

Details:
### Summary 
This notification is related to the CloudFront signing utilities in the AWS SDK for .NET, which are used to generate Amazon CloudFront signed URLs and signed cookies. A defense-in-depth enhancement has been implemented to improve handling of special characters, such as double quotes and backslashes, in input values. 

### Impact 
The CloudFront signing utilities build policy documents that define access restrictions for signed URLs and cookies. If an application passes unsanitized input containing special characters to these utilities, the resulting policy document may not reflect the application's intended access restrictions. While the SDK was functioning safely within the requirements of the shared responsibility model, additional safeguards have been added to support secure customer implementations. Applications that already follow AWS security best practices for input validation are not impacted. 

### Impacted versions: 
- AWS SDK for .NET V3 (`AWSSDK.CloudFront`): < 3.7.510.7
- AWS SDK for .NET V4 (`AWSSDK.Extensions.CloudFront.Signers`): 4.0.0.0 - 4.0.0.25 

### Patches 
On February 25th, 2026, an enhancement was made to the AWS SDK for .NET CloudFront signing utilities. The enhancement ensures that special characters in input values are correctly handled. We recommend upgrading to the latest version. 

### Workarounds 
No workarounds are needed, but customers should ensure that your application is following security best practices: 
- Implement proper input validation in your application code before passing values to CloudFront signing utilities 
- Update to the latest AWS SDK release on a regular basis 
- Follow AWS security best practices for SDK configuration

### References 
If there are any questions or comments about this advisory, contact AWS Security via our [vulnerability reporting page](https://aws.amazon.com/security/vulnerability-reporting) or directly via email to [aws-security@amazon.com](mailto:aws-security@amazon.com). Please do not create a public GitHub issue.

### Acknowledgement
AWS SDK for .NET thanks the Amazon Inspector Security Research team for identifying this issue and working through the coordinated process together.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q8-x86 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q8-x64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q8-arm64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q8-OpenMP-x64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q8-OpenMP-arm64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q8-AnyCPU (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q16-x86 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q16-x64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q16-arm64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q16-OpenMP-x86 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q16-OpenMP-x64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q16-OpenMP-arm64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q16-HDRI-x86 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q16-HDRI-x64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q16-HDRI-arm64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q16-HDRI-OpenMP-arm64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q16-HDRI-AnyCPU (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-9r56-3gjq-hqf7
Package: Magick.NET-Q16-AnyCPU (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick: META reader memory leak in the APP1JPEG input path

Details:
ImageMagick contains a memory leak in the META reader when processing the `APP1JPEG` input path.
GitHub Security Advisory: GHSA-6p22-q7w5-33pg
Package: Magick.NET-Q8-x86 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick has possible memory leak in ASHLAR coder when action fails

Details:
The ASHLAR coder leaks a temporary image when an action fails and that could result to an out of memory.
GitHub Security Advisory: GHSA-6p22-q7w5-33pg
Package: Magick.NET-Q8-x64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick has possible memory leak in ASHLAR coder when action fails

Details:
The ASHLAR coder leaks a temporary image when an action fails and that could result to an out of memory.
GitHub Security Advisory: GHSA-6p22-q7w5-33pg
Package: Magick.NET-Q8-arm64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick has possible memory leak in ASHLAR coder when action fails

Details:
The ASHLAR coder leaks a temporary image when an action fails and that could result to an out of memory.
GitHub Security Advisory: GHSA-6p22-q7w5-33pg
Package: Magick.NET-Q8-OpenMP-x64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick has possible memory leak in ASHLAR coder when action fails

Details:
The ASHLAR coder leaks a temporary image when an action fails and that could result to an out of memory.
GitHub Security Advisory: GHSA-6p22-q7w5-33pg
Package: Magick.NET-Q8-OpenMP-arm64 (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick has possible memory leak in ASHLAR coder when action fails

Details:
The ASHLAR coder leaks a temporary image when an action fails and that could result to an out of memory.
GitHub Security Advisory: GHSA-6p22-q7w5-33pg
Package: Magick.NET-Q8-AnyCPU (NUGET)
Severity: LOW (CVSS 3.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.11.1
Patched in: 14.11.1

Summary: ImageMagick has possible memory leak in ASHLAR coder when action fails

Details:
The ASHLAR coder leaks a temporary image when an action fails and that could result to an out of memory.