VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Dec 6, 2024· Updated Jun 17, 2026

CVE-2024-54138

CVE-2024-54138

Description

NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown content. While the platform properly filters out JavaScript from standard links, it does not adequately sanitize autolinks. This oversight allows attackers to exploit autolinks as a vector for Cross-Site Scripting (XSS) attacks. This vulnerability is fixed in 2024.12.06.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Microsoft/NuGetGallery
    cpe:2.3:a:microsoft:nugetgallery:*:*:*:*:*:*:*:*
    Range: <2024.12.06
  • Nuget/Nugetgalleryllm-fuzzy2 versions
    <2024.12.06+ 1 more
    • (no CPE)range: <2024.12.06
    • (no CPE)range: < 2024.12.06

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.