CyberSecBulletin

Metalama vulnerabilities

We track 2 vulnerabilities in Metalama products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Metalama vulnerabilities

  • 7.3 High severity

    Metalama: Deserialization of Untrusted Data

    CVE-2026-62848Metalama

    Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 2026.0.25 and 2026.1.19, the Windows Visual Studio integration deserializes local named-pipe messages without restricting which CLR types can b

  • 8.2 High severity

    Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#.

    CVE-2026-62847Metalama

    Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execute compile-time assemblies, auxiliary executable tools and embedded helper assembli