NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-55315CriticalMicrosoft.AspNetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability CVE-2025-11573HighAmazon.IonDotnet: Amazon.IonDotnet is vulnerable to Denial of Service attacks CVE-2025-61778CriticalAkka.Remote: Akka.Remote TLS did not properly implement certificate-based authentication CVE-2025-55797MediumFormCMS: FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint CVE-2025-57692MediumPiranha: PiranhaCMS stored XSS CVE-2025-59821MediumDotNetNuke.Core: DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile CVE-2025-59546LowDotNetNuke.Core: DNN Vulnerable to Stored XSS Using Backend Admin Credentials CVE-2025-59545CriticalDotNetNuke.Core: DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module CVE-2025-59539MediumDotNetNuke.Core: DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field CVE-2025-59535MediumDotNetNuke.Core: DNN allows loading unused themes on anonymous clients through query parameters CVE-2025-9708MediumKubernetesClient: Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain CVE-2025-57807LowMagick.NET-Q16-x64: ImageMagick BlobStream Forward-Seek Under-Allocation CVE-2025-56236MediumFormCMS: FormCms avatar upload feature has a stored cross-site scripting (XSS) vulnerability CVE-2025-57803HighMagick.NET-Q16-AnyCPU: ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow CVE-2025-55298HighMagick.NET-Q16-AnyCPU: ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution CVE-2025-55212LowMagick.NET-Q16-AnyCPU: ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash CVE-2025-55160MediumMagick.NET-Q16-AnyCPU: ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree CVE-2025-55154HighMagick.NET-Q8-x86: imagemagick: integer overflows in MNG magnification CVE-2025-55004HighMagick.NET-Q16-AnyCPU: imagemagick: heap-buffer overflow read in MNG magnification with alpha CVE-2025-68469LowMagick.NET-Q16-AnyCPU: ImageMagick has a heap-buffer-overflow CVE-2025-53019LowMagick.NET-Q16-AnyCPU: ImageMagick has a Memory Leak in magick stream CVE-2025-53014LowMagick.NET-Q16-AnyCPU: ImageMagick has a Heap Buffer Overflow in InterpretImageFilename CVE-2025-53101HighMagick.NET-Q16-AnyCPU: ImageMagick has a Stack Buffer Overflow in image.c CVE-2025-54575MediumSixLabors.ImageSharp: SixLabors ImageSharp Has Infinite Loop in GIF Decoder When Skipping Malformed Comment Extension Blocks CVE-2025-54425MediumUmbraco.Cms.Api.Delivery: Umbraco Delivery API allows for cached requests to be returned with an invalid API key

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo