Skip to main content
cve.nowby Sazabi
← NuGet
NuGetPackage

Microsoft.OpenApi

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release
3.11.0 (Oct 19, 2026): no advisory affects it
Newest unaffected release
3.11.0 (Oct 19, 2026), the latest release
Advisories
1 · 1 high
Releases
177 since 1.0.0 (May 8, 2018)
Registry
NuGet
Releases read
Nov 8, 2026

Version timeline

  • CVE-2026-49451
    Affects 2.0.0-preview.11 to 2.7.4 (2.7.5 is outside it); 3.0.0 to 3.5.3 (3.5.4 is outside it)
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

  • Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing

    Affected: from 2.0.0-preview.11, fixed in 2.7.5; from 3.0.0, fixed in 3.5.4.

    Fixed in 2.7.5 (released May 26, 2026, 35 days before disclosure) and 3.5.4 (released May 26, 2026, 35 days before disclosure).

    The latest release, 3.11.0, is not affected.