Advisory Database
  • Advisories
  • Dependency Scanning
  1. nuget
  2. ›
  3. NuGet.CommandLine
  4. ›
  5. GHSA-jw42-5m4v-9c8g

GHSA-jw42-5m4v-9c8g: Duplicate Advisory: NuGet Client Security Feature Bypass Vulnerability

January 9, 2024 (updated May 31, 2024)

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-68w7-72jg-6qpp. This link is maintained to preserve external references.

Original Description

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

References

  • github.com/advisories/GHSA-jw42-5m4v-9c8g
  • msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057
  • nvd.nist.gov/vuln/detail/CVE-2024-0057
  • security.netapp.com/advisory/ntap-20240208-0007

Code Behaviors & Features

Detect and mitigate GHSA-jw42-5m4v-9c8g with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →

Affected versions

All versions starting from 6.8.0 before 6.8.1, version 6.8.0

Fixed versions

  • 6.8.1

Solution

Upgrade to version 6.8.1 or above.

Impact 9.1 CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Learn more about CVSS

Weakness

  • CWE-20: Improper Input Validation

Source file

nuget/NuGet.CommandLine/GHSA-jw42-5m4v-9c8g.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sun, 08 Nov 2026 00:16:15 +0000.