VulnerableCode Package Details - pkg:nuget/Microsoft.NetCore.App.Runtime.win-x64@7.0.4

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:nuget/Microsoft.NetCore.App.Runtime.win-x64@7.0.4

purl	pkg:nuget/Microsoft.NetCore.App.Runtime.win-x64@7.0.4
Tags	Ghost

Next non-vulnerable version	8.0.26
Latest non-vulnerable version	10.0.6
Risk	4.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-wkgf-j6rb-kfht Aliases: CVE-2023-28260 GHSA-w4m3-43gp-x8hx	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') .NET DLL Hijacking Remote Code Execution Vulnerability	7.0.5 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-02T16:59:17.381761+00:00	GHSA Importer	Affected by	VCID-wkgf-j6rb-kfht	https://github.com/advisories/GHSA-w4m3-43gp-x8hx	38.1.0