Skip to content
OpenAdvisories

Package · NuGet

Metalama.Framework

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.2
    CVE-2026-62847

    Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)

    Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execute compile-time assemblies, auxiliary executable tools and embedded helper assembl…

    metalama Metalama Metalama.Framework Metalama.Tool NuGet
  • High 7.3
    CVE-2026-62848

    Metalama's Visual Studio inter-process named pipe allows unsafe deserialization that enables local code execution

    Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 2026.0.25 and 2026.1.19, the Windows Visual Studio integration deserializes local named-pipe messages without restricting which CLR types can …

    metalama Metalama Metalama.Framework NuGet