Metalama.Framework
NuGet2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting Metalama.Frameworkpage 1 of 1
- CVE-2026-62847HIGHCVSS 8.2EG 8.2fixed in 2026.1.19, 2025.1.18 or 2026.0.25, by version range2026-10-14
vulnerable: 2026.1.0-preview ... 2026.1.9-preview (19 versions)
Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execute compile-time assemblies, auxiliary executable tools and emb…
- CVE-2026-62848HIGHCVSS 7.3EG 7.3fixed in 2026.1.19, 2025.1.18 or 2026.0.25, by version range2026-10-30
vulnerable: 2026.1.0-preview ... 2026.1.9-preview (19 versions)
Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 2026.0.25 and 2026.1.19, the Windows Visual Studio integration deserializes local named-pipe messages without restricting …
Check whether Metalama.Framework is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for Metalama.Framework CVEs against the assets you own.
Book a Demo →