️ CRITICAL: NuGetGallery improper input validation (CVE-2026-39399, CVSS 9.6) allows crafted .nuspec files to trigger RCE & arbitrary blob writes. Update to commit 0e80f87628349207cdcaf55358491f8a6f1ca276. Details: https://radar.offseq.com/threat/cve-2026-39399-cwe-20-improper-input-validation-in-f5d85126 #OffSeq #NuGet #Vuln #infosec

]]>https://board.circlewithadot.net/topic/623d38aa-e069-4ad8-84f8-eedc768b0a2f/critical-nugetgallery-improper-input-validation-cve-2026-39399-cvss-9.6-allows-craftedRSS for NodeFri, 15 May 2026 01:44:38 GMTWed, 15 Apr 2026 00:00:43 GMT60