Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/Inedo.ProGet.SDK@4.8.0
purl pkg:nuget/Inedo.ProGet.SDK@4.8.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-xp2s-g9eb-a3h9
Aliases:
CVE-2017-15608
Cross-Site Request Forgery (CSRF) Inedo ProGet Beta5 has CSRF, allowing an attacker to change advanced settings. There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-g985-9h1y-fqbn Improper Input Validation Inedo ProGet does not properly address dangerous package IDs during package addition, aka PG-1060. CVE-2017-14944

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T09:49:37.510379+00:00 GitLab Importer Affected by VCID-xp2s-g9eb-a3h9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Inedo.ProGet.SDK/CVE-2017-15608.yml 38.6.0
2026-05-30T20:53:03.052003+00:00 GitLab Importer Fixing VCID-g985-9h1y-fqbn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Inedo.ProGet.SDK/CVE-2017-14944.yml 38.6.0