NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2022-29864HighOPCFoundation.NetStandard.Opc.Ua.Core: Uncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core CVE-2022-29865HighOPCFoundation.NetStandard.Opc.Ua.Core: Incorrect Implementation of Authentication Algorithm in OPCFoundation.NetStandard.Opc.Ua.Core CVE-2022-29866HighOPCFoundation.NetStandard.Opc.Ua.Core: Uncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core CVE-2022-29862HighOPCFoundation.NetStandard.Opc.Ua.Core: Security Update for the OPC UA .NET Standard Stack CVE-2022-30184MediumNuGet.Commands: Potential leak of NuGet.org API key CVE-2022-30349MediumSSCMS: Cross site scripting in SSCMS CVE-2022-29245MediumSSH.NET: Weak private key generation in SSH.NET CVE-2022-29362MediumZKEACMS.Publisher: Cross-site Scripting in ZKEACMS CVE-2021-42655HighSSCMS: SQL injection in SiteServer CMS CVE-2021-42656MediumSSCMS: Cross site scripting in SiteServer CMS CVE-2020-0813HighMicrosoft.ChakraCore: ChakraCore information disclosure vulnerability CVE-2019-0976MediumNuGet.Commands: NuGet Package Manager Tampering Vulnerability CVE-2019-1302MediumMicrosoft.AspNetCore.SpaServices: Elevation of privilege in ASP.NET Core CVE-2019-1010199MediumServiceStack: Cross site scripting attack in ServiceStack Framework CVE-2019-1052HighMicrosoft.ChakraCore: Chakra Scripting Engine RCE via Out-of-bounds write CVE-2019-1002HighMicrosoft.ChakraCore: ChakraCore RCE via Out-of-bounds write CVE-2019-1024HighMicrosoft.ChakraCore: Chakra Scripting Engine RCE Vulnerability CVE-2019-1051HighMicrosoft.ChakraCore: Chakra Scripting Engine RCE via Out-of-bounds write CVE-2021-42279HighMicrosoft.ChakraCore: Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption CVE-2021-20331Mediummongodb.driver: MongoDB C# Driver Risk of Exposing Authentication Data via Command Listener CVE-2021-24112CriticalSystem.Drawing.Common: .NET Core Remote Code Execution Vulnerability CVE-2021-1721MediumMicrosoft.NETCore.App: Denial of service in .NET core CVE-2021-1723HighMicrosoft.AspNetCore.Server.Kestrel.Core: ASP.NET Core and Visual Studio Denial of Service Vulnerability CVE-2020-5809MediumUmbracoCms.Core: Umbraco CMS vulnerable to stored XSS CVE-2020-20136CriticalQuantConnect.Common: QuantConnect Lean vulnerable to insecure deserialization

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.