{"action":"Upgrade Metalama.Framework to 2025.1.18 (2025.1.x), 2026.0.25 (2026.0.x) or 2026.1.19 (2026.1.x) or later.","affected":[{"fixed":"2026.1.19","introduced":"2026.1.0-preview"},{"fixed":"2025.1.18","introduced":"0"},{"fixed":"2026.0.25","introduced":"2026.0.0-preview"}],"component":"Metalama.Framework","cve_ids":["CVE-2026-62847"],"ecosystem":"NuGet","exploited":false,"fixed_versions":["2026.1.19","2025.1.18","2026.0.25"],"ghsa_id":"GHSA-m6wq-39m7-9xpp","id":"tcs_01M5N8TJPS5TTPHYFMPM375CSG","modified_at":"2026-10-14T19:30:07.066808149Z","published_at":"2026-10-14T19:24:53Z","references":["https://osv.dev/vulnerability/GHSA-m6wq-39m7-9xpp","https://github.com/metalama/Metalama/security/advisories/GHSA-m6wq-39m7-9xpp","https://github.com/metalama/Metalama/pull/1719","https://github.com/metalama/Metalama/commit/09911349a916e82194b1cfaa6d0a38acad928fc9","https://github.com/metalama/Metalama/commit/92c4feecfce86d18fcb007ab6d3a1b4383326a2e","https://github.com/metalama/Metalama/commit/ab9407263203c66d7c5680a34c28dba31f9951c9","https://github.com/metalama/Metalama"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-m6wq-39m7-9xpp","url":"https://osv.dev/vulnerability/GHSA-m6wq-39m7-9xpp"}],"summary":"Metalama allows local code execution through DLL planting in shared temporary directories"}