NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-43484HighSystem.IO.Packaging: Microsoft Security Advisory CVE-2024-43484 | .NET Denial of Service Vulnerability CVE-2024-43483HighSystem.Security.Cryptography.Cose: Microsoft Security Advisory CVE-2024-43483 | .NET Denial of Service Vulnerability CVE-2024-38229HighMicrosoft.AspNetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability CVE-2024-45302MediumRestSharp: CRLF Injection in RestSharp's `RestRequest.AddHeader` method CVE-2024-44930MediumSerilog.Enrichers.ClientInfo: Serilog Client IP Spoofing vulnerability CVE-2024-43377MediumUmbraco.Cms: Umbraco CMS Improper Access Control vulnerability CVE-2024-43376MediumUmbraco.Cms.Api.Management: Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information CVE-2024-38168HighMicrosoft.AspNetCore.App.Runtime.win-arm: Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability CVE-2024-38167MediumMicrosoft.NetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability GHSA-55P7-V223-X366MediumIdentityServer4: IdentityServer Open Redirect vulnerability CVE-2024-39694MediumDuende.IdentityServer: IdentityServer Open Redirect vulnerability CVE-2024-41799HighTgstation.Server.Api: tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned…CVE-2024-28698CriticalCsla: CLSA Directory Traversal vulnerability CVE-2024-41132MediumSixLabors.ImageSharp: SixLabors ImageSharp has Excessive Memory Allocation in Gif Decoder CVE-2024-41131HighSixLabors.ImageSharp: SixLabors ImageSharp Out-of-bounds Write CVE-2024-40636LowSteeltoe.Discovery.Eureka: Steeltoe Leaks Basic Auth Credentials to Logs After Fetch Registry Error GHSA-GMC6-FWG3-75M5HighMimeKit: Mimekit has vulnerable dependency that can lead to denial of service CVE-2024-38095HighMicrosoft.NetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability CVE-2024-38081HighMicrosoft.IO.Redist: Microsoft Security Advisory CVE-2024-38081 | .NET Elevation of Privilege Vulnerability CVE-2024-35264CriticalMicrosoft.AspNetCore.App.Runtime.linux-arm: Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability CVE-2024-30105HighSystem.Text.Json: Microsoft Security Advisory CVE-2024-30105 | .NET Denial of Service Vulnerability CVE-2024-39677HighNHibernate: NHibernate SQL injection vulnerability in discriminator mappings, static fields referenced in HQL, and some utilities CVE-2024-33862HighOPCFoundation.NetStandard.Opc.Ua.Core: OPCFoundation.NetStandard.Opc.Ua.Core buffer-management vulnerability CVE-2024-38356Mediumtinymce: TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option CVE-2024-38357Mediumtinymce: TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo