{"action":"Upgrade NuGet.CommandLine to 4.9.6 (4.9.x), 5.7.3 (5.7.x), 5.9.3 (5.9.x), 5.11.3 (5.11.x), 6.0.3 (6.0.x), 6.2.2 (6.2.x) or 6.3.1 (6.3.x) or later.","affected":[{"fixed":"4.9.6","introduced":"4.6.0"},{"fixed":"5.7.3","introduced":"5.0.0"},{"fixed":"5.9.3","introduced":"5.8.0"},{"fixed":"5.11.3","introduced":"5.10.0"},{"fixed":"6.0.3","introduced":"6.0.0"},{"fixed":"6.2.2","introduced":"6.1.0"},{"fixed":"6.3.1","introduced":"6.3.0"}],"component":"NuGet.CommandLine","cve_ids":["CVE-2022-41032"],"ecosystem":"NuGet","epss":0.01285,"exploited":false,"fixed_versions":["4.9.6","5.7.3","5.9.3","5.11.3","6.0.3","6.2.2","6.3.1"],"ghsa_id":"GHSA-g3q9-xf95-8hp5","id":"tcs_01M5N8NK8MFFWQ7C0KY12ESRVC","modified_at":"2025-02-28T21:41:24.319046Z","published_at":"2022-10-11T20:48:52Z","references":["https://osv.dev/vulnerability/GHSA-g3q9-xf95-8hp5","https://github.com/NuGet/NuGet.Client/security/advisories/GHSA-g3q9-xf95-8hp5","https://nvd.nist.gov/vuln/detail/CVE-2022-41032","https://github.com/NuGet/Announcements/issues/65","https://github.com/NuGet/NuGet.Client/commit/6392863cf83f4870e18f1d02f2463cca633e59ed","https://github.com/NuGet/NuGet.Client","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOG35Z5RL5W5RGLLYLN46CI4D2UPDSWM","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HDPT2MJC3HD7HYZGASOOX6MTDR4ASBL5","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X7BMHO5ITRBZREVTEKHQRGSFRPDMALV3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FOG35Z5RL5W5RGLLYLN46CI4D2UPDSWM","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HDPT2MJC3HD7HYZGASOOX6MTDR4ASBL5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X7BMHO5ITRBZREVTEKHQRGSFRPDMALV3","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41032","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41032","https://www.edwardthomson.com/blog/my-first-cve.html"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-g3q9-xf95-8hp5#NuGet/NuGet.CommandLine","url":"https://osv.dev/vulnerability/GHSA-g3q9-xf95-8hp5"}],"summary":"NuGet Elevation of Privilege Vulnerability"}