Skip to main content
cve.nowby Sazabi
← NuGet
NuGetPackage

Microsoft.DotNet.ILCompiler

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release
10.0.14 (Oct 25, 2026): no advisory affects it
Newest unaffected release
10.0.14 (Oct 25, 2026), the latest release
Advisories
1 · 1 high
Releases
136 since 7.0.0 (Nov 7, 2022)
Registry
NuGet
Releases read
Nov 8, 2026

Version timeline

  • GHSA-P3JP-9V83-76W9
    Affects 8.0.0 to 8.0.32 (8.0.33 is outside it); 9.0.0 to 9.0.21 (9.0.22 is outside it); 10.0.0 to 10.0.13 (10.0.14 is outside it); 11.0.0-preview.1.26104.118 to 11.0.0-rc.2.26504.105 (11.0.0-rc.3.26522.148 is outside it)
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

  • Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability

    Affected: from 8.0.0, fixed in 8.0.33; from 9.0.0, fixed in 9.0.22; from 10.0.0, fixed in 10.0.14; from 11.0.0-preview.1.26104.118, fixed in 11.0.0-rc.3.26522.148.

    Fixed in 8.0.33 (released Oct 25, 2026, 9 days before disclosure), 9.0.22 (released Oct 25, 2026, 9 days before disclosure), 10.0.14 (released Oct 25, 2026, 9 days before disclosure) and 1 other version.

    The latest release, 10.0.14, is not affected.