GHSA-xrw6-gwf8-vvr9Published

Tmds.DBus: malicious D-Bus peers can spoof signals, exhaust file descriptor resources, and cause denial of service

Exact source revision recorded 23 Oct 2026 16:01:25 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

osv · GHSA-xrw6-gwf8-vvr9

Published

Tmds.DBus

NuGet

ECOSYSTEM · introduced 0 → fixed 0.92.0

32 explicitly affected versions

0.1.0, 0.10.1, 0.11.0, 0.12.0, 0.13.0, 0.14.0, 0.15.0, 0.16.0, 0.17.0, 0.18.0, 0.19.0, 0.2.0, 0.20.0, 0.21.0, 0.21.1, 0.21.2, 0.22.0, 0.23.0, 0.3.0, 0.4.0, 0.5.0, 0.6.0, 0.7.0, 0.8.0, 0.9.0, 0.9.1, 0.90.0, 0.90.1, 0.90.2, 0.90.3, 0.91.0, 0.91.1

Tmds.DBus.Protocol

NuGet

ECOSYSTEM · introduced 0 → fixed 0.21.3

12 explicitly affected versions

0.12.0, 0.13.0, 0.14.0, 0.15.0, 0.16.0, 0.17.0, 0.18.0, 0.19.0, 0.20.0, 0.21.0, 0.21.1, 0.21.2

Tmds.DBus.Protocol

NuGet

ECOSYSTEM · introduced 0.22.0 → fixed 0.92.0

8 explicitly affected versions

0.22.0, 0.23.0, 0.90.0, 0.90.1, 0.90.2, 0.90.3, 0.91.0, 0.91.1

Original source record · Cite this exact observation · Complete original publisher JSON