WS-2016-7085 | Mend Vulnerability Database

Vulnerability DatabaseWS-2016-7085

WS-2016-7085

Published:May 14, 2026

Updated:May 14, 2026

All versions of the package System.Linq.Dynamic are vulnerable to Code Injection, due to an issue with restricting execution methods.

Affected Packages

xcomponent.studio.community (NUGET):

Affected version(s) >=5.0.8 <=9.9.0

Fix Suggestion:

Update to version no_fix

c21.core.app.service (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

emframework (NUGET):

Affected version(s) >=1.0.0 <=1.0.0.19

Fix Suggestion:

Update to version no_fix

help (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

qcommon.ui.devexpress (NUGET):

Affected version(s) >=1.0.6246.24193 <1.0.6246.38425

Fix Suggestion:

Update to version 1.0.6246.38425

mh.domainlayer.core (NUGET):

Affected version(s) =1.0.0 <1.0.1

Fix Suggestion:

Update to version 1.0.1

pacage (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

cireson.platform.extension.openidadal (NUGET):

Affected version(s) >=0.1.0-rc0004 <=0.1.0-integration0001

Fix Suggestion:

Update to version no_fix

servicefull.spy.community (NUGET):

Affected version(s) >=7.0.0 <=10.25.0

Fix Suggestion:

Update to version no_fix

mh.application (NUGET):

Affected version(s) =1.0.0 <1.0.1

Fix Suggestion:

Update to version 1.0.1

cireson.assetmanagement.connectors.configmgr.core (NUGET):

Affected version(s) >=0.1.0-rc0048 <0.1.0-integration0001

Fix Suggestion:

Update to version 0.1.0-integration0001

decommserviceclientnuget (NUGET):

Affected version(s) =1.0.0.1

Fix Suggestion:

Update to version no_fix

xcomponent.spy.community (NUGET):

Affected version(s) >=5.0.8 <=9.9.0

Fix Suggestion:

Update to version no_fix

servicefull.studio.community (NUGET):

Affected version(s) >=7.0.0 <=10.25.0

Fix Suggestion:

Update to version no_fix

wgcommonlib (NUGET):

Affected version(s) >=1.0.0 <=1.0.4

Fix Suggestion:

Update to version no_fix

net.appclusive.ps.client (NUGET):

Affected version(s) >=4.0.0 <=4.0.4

Fix Suggestion:

Update to version no_fix

morestachio.netframework (NUGET):

Affected version(s) =2.3.2 <2.3.3

Fix Suggestion:

Update to version 2.3.3

cireson.platform.sdk (NUGET):

Affected version(s) >=1.0.70-rc0033 <=1.0.74-rc0008

Fix Suggestion:

Update to version no_fix

mh.infrastucture.data (NUGET):

Affected version(s) =1.0.0 <1.0.1

Fix Suggestion:

Update to version 1.0.1

cireson.platform.core.testing (NUGET):

Affected version(s) >=0.0.0 <=1.0.74-rc0008

Fix Suggestion:

Update to version no_fix

c21.core.app.domain (NUGET):

Affected version(s) =1.0.0

Fix Suggestion:

Update to version no_fix

cevi.adhoc (NUGET):

Affected version(s) =1.0.0 <1.0.0.1

Fix Suggestion:

Update to version 1.0.0.1

cireson.assetmanagement.core (NUGET):

Affected version(s) >=0.1.0-rc0048 <0.1.0-rc0126

Fix Suggestion:

Update to version 0.1.0-rc0126

glassdesigner.migrator (NUGET):

Affected version(s) =2.3.6

Fix Suggestion:

Update to version no_fix

xcomponent.community (NUGET):

Affected version(s) >=5.0.0-beta0021 <=5.0.7

Fix Suggestion:

Update to version no_fix

crossbridge.dxservices (NUGET):

Affected version(s) =1.0.0 <1.0.1

Fix Suggestion:

Update to version 1.0.1

makesenswebaccessapi (NUGET):

Affected version(s) >=2020.9.16 <=2021.3.5

Fix Suggestion:

Update to version no_fix

defontana.sesiones (NUGET):

Affected version(s) =4.5.0 <4.5.1

Fix Suggestion:

Update to version 4.5.1

system.linq.dynamic (NUGET):

Affected version(s) >=1.0.6 <=1.0.8

Fix Suggestion:

Update to version no_fix

wpftoolkitframework (NUGET):

Affected version(s) >=1.0.0.7 <1.0.7.4

Fix Suggestion:

Update to version 1.0.7.4

Related Resources (1)

https://github.com/kahanu/System.Linq.Dynamic/issues/62

Do you need more information?

CVSS v4

Base Score:

9.3

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

NONE

Vulnerable System Confidentiality

HIGH

Vulnerable System Integrity

HIGH

Vulnerable System Availability

HIGH

Subsequent System Confidentiality

NONE

Subsequent System Integrity

NONE

Subsequent System Availability

NONE

CVSS v3

Base Score:

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH