NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
GHSA-P3JP-9V83-76W9HighMicrosoft.DotNet.ILCompiler: Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write VulnerabilityCVE-2026-62848HighMetalama.Framework: Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code executionGHSA-473Q-M89C-GHF8MediumMySqlConnector: MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before…CVE-2026-116675Hightinymce: TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serializationCVE-2026-92707MediumMessagePack: MessagePack: Nested arrays can blow past buffer length limitsCVE-2026-72923HighMicrosoft.OpenApi.YamlReader: Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansionCVE-2026-62847MediumMetalama.Framework: Metalama allows local code execution through DLL planting in shared temporary directoriesCVE-2026-70035HighMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-70186HighMicrosoft.AspNetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service VulnerabilityCVE-2026-70007HighMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-87697HighMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-96225HighMicrosoft.NETCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege VulnerabilityCVE-2026-96230HighMicrosoft.AspNetCore.Components.WebAssembly.Server: Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution VulnerabilityCVE-2026-70179HighMicrosoft.AspNetCore.Authentication.Negotiate: Microsoft Security Advisory CVE-2026-70179 - ASP.NET Core Elevation of Privilege VulnerabilityCVE-2026-96224HighMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-85363HighMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-96959HighSystem.Security.Cryptography.Xml: Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service VulnerabilityCVE-2026-83520HighMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-70174HighMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-96232HighMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure VulnerabilityCVE-2026-96234MediumMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure VulnerabilityCVE-2026-96229MediumMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure VulnerabilityCVE-2026-96235HighMicrosoft.WindowsDesktop.App.Runtime.win-arm64: Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution VulnerabilityCVE-2026-96222HighSystem.Security.Cryptography.Xml: Microsoft Security Advisory CVE-2026-96222 - .NET Spoofing VulnerabilityCVE-2026-96231HighMicrosoft.NETCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo