NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-61413MediumPiranha: Piranha CMS vulnerable to stored cross-site scripting (XSS)CVE-2025-11849Mediummammoth: Mammoth is vulnerable to Directory Traversal CVE-2025-11842MediumSmidge: Smidge is vulnerable to Path Traversal CVE-2025-54539CriticalApache.NMS.AMQP: Apache ActiveMQ NMS AMQP Client has a Deserialization of Untrusted Data vulnerability CVE-2025-55248MediumMicrosoft.NetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability CVE-2025-55247HighMicrosoft.Build.Tasks.Core: Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability CVE-2025-55315CriticalMicrosoft.AspNetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability CVE-2025-11573HighAmazon.IonDotnet: Amazon.IonDotnet is vulnerable to Denial of Service attacks CVE-2025-61778CriticalAkka.Remote: Akka.Remote TLS did not properly implement certificate-based authentication CVE-2025-55797MediumFormCMS: FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint CVE-2025-57692MediumPiranha: PiranhaCMS stored XSS CVE-2025-59821MediumDotNetNuke.Core: DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile CVE-2025-59546LowDotNetNuke.Core: DNN Vulnerable to Stored XSS Using Backend Admin Credentials CVE-2025-59545CriticalDotNetNuke.Core: DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module CVE-2025-59539MediumDotNetNuke.Core: DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field CVE-2025-59535MediumDotNetNuke.Core: DNN allows loading unused themes on anonymous clients through query parameters CVE-2025-9708MediumKubernetesClient: Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain CVE-2025-57807LowMagick.NET-Q16-x64: ImageMagick BlobStream Forward-Seek Under-Allocation CVE-2025-56236MediumFormCMS: FormCms avatar upload feature has a stored cross-site scripting (XSS) vulnerability CVE-2025-57803HighMagick.NET-Q16-AnyCPU: ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow CVE-2025-55298HighMagick.NET-Q16-AnyCPU: ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution CVE-2025-55212LowMagick.NET-Q16-AnyCPU: ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash CVE-2025-55160MediumMagick.NET-Q16-AnyCPU: ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree CVE-2025-55154HighMagick.NET-Q8-x86: imagemagick: integer overflows in MNG magnification CVE-2025-55004HighMagick.NET-Q16-AnyCPU: imagemagick: heap-buffer overflow read in MNG magnification with alpha

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.