Known vulnerabilities and malicious package reports for System.Security.Cryptography.Pkcs on NuGet, live from OSV, with CISA KEV exploitation status and EPSS scores.
0 malicious package reports and 3 vulnerabilities returned by OSV. Check a specific version to see which reports apply.
.NET Denial of Service vulnerability
Published .
Updated .
Reported affected releases: 7.0.0, 7.0.1, 6.0.0, 6.0.1, 6.0.2.
Affected ranges: introduced 7.0.0, fixed 7.0.2; introduced 6.0.0, fixed 6.0.3.
Fix versions reported by the advisory: 7.0.2, 6.0.3.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-70162 - .NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.13; introduced 11.0.0-preview.1, fixed 11.0.0-rc.2; introduced 8.0.0, fixed 8.0.2; introduced 9.0.0, fixed 9.0.21.
Fix versions reported by the advisory: 10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21.
Severity: MEDIUM.
Microsoft Security Advisory CVE-2026-84008 - .NET Denial of Service Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.13; introduced 11.0.0-preview.1, fixed 11.0.0-rc.2; introduced 8.0.0, fixed 8.0.2; introduced 9.0.0, fixed 9.0.21.
Fix versions reported by the advisory: 10.0.13, 11.0.0-rc.2, 8.0.2, 9.0.21.
Severity: HIGH.
Source: OSV, including OpenSSF malicious-package reports and GitHub advisories. No known report is not proof a package is safe.