icsharpcode — Vulnerabilities & Security Advisories 3

icsharpcode develops open-source development tools, most notably the .NET decompiler ILSpy. Historically, vulnerabilities in their products have included remote code execution and cross-site scripting, often stemming from unsafe deserialization and improper input validation. While no major security incidents have been widely documented, their CVE history reflects common risks in code analysis tools. The project maintains a moderate security profile with three recorded vulnerabilities, primarily related to memory corruption and unsafe handling of user-supplied data. Their codebase generally follows secure coding practices, though older versions have shown susceptibility to classic exploitation vectors in decompilation and assembly tools.