VulnerableCode Package Details - pkg:nuget/Microsoft.NetCore.App.Runtime.win-arm64@6.0.15

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:nuget/Microsoft.NetCore.App.Runtime.win-arm64@6.0.15

purl	pkg:nuget/Microsoft.NetCore.App.Runtime.win-arm64@6.0.15
Tags	Ghost

Next non-vulnerable version	8.0.26
Latest non-vulnerable version	10.0.6
Risk	4.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-wkgf-j6rb-kfht Aliases: CVE-2023-28260 GHSA-w4m3-43gp-x8hx	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') .NET DLL Hijacking Remote Code Execution Vulnerability	6.0.16 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 7.0.5 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-wkgf-j6rb-kfht
Aliases:
CVE-2023-28260
GHSA-w4m3-43gp-x8hx

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') .NET DLL Hijacking Remote Code Execution Vulnerability

6.0.16
Affected by 4 other vulnerabilities.

7.0.5
Affected by 5 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-02T16:59:17.317434+00:00	GHSA Importer	Affected by	VCID-wkgf-j6rb-kfht	https://github.com/advisories/GHSA-w4m3-43gp-x8hx	38.1.0