Description
AutoUpdater.cs in AutoUpdater.NET before 1.5.8 allows XXE.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Autoupdater.NET.Official | < 1.5.8 | 1.5.8 | GHSA-75p2-hgw4-g7f7 |
Critical · 9.8
CVE-2019-20627
EUVD-2022-2926GHSA-75p2-hgw4-g7f7
AutoUpdater.NET allows XXE
Published Mar 23, 2020 · Updated Aug 5, 2024 · Assigned by mitre