NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2022-24464HighMicrosoft.AspNetCore.App.Runtime.linux-arm: .NET Denial of Service Vulnerability CVE-2022-21986HighMicrosoft.AspNetCore.App.Runtime.win-x64: .NET Denial of Service Vulnerability CVE-2021-34485MediumMicrosoft.NETCore.App: .NET Core Information Disclosure Vulnerability CVE-2022-24512MediumMicrosoft.NETCore.App.Runtime.linux-arm: .NET Remote Code Execution Vulnerability CVE-2022-41032HighNuGet.Commands: NuGet Elevation of Privilege Vulnerability CVE-2022-32173MediumOrchardCore: OrchardCore vulnerable to HTML injection CVE-2022-2922MediumDotNetNuke.Core: DNN vulnerable to Relative Path Traversal CVE-2022-39256CriticalCompositeC1.Core: Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution.CVE-2022-38013HighMicrosoft.AspNetCore.App.Runtime.linux-arm: .NET Denial of Service Vulnerability CVE-2022-29145HighMicrosoft.AspNetCore.App.Runtime.win-x64: .NET Denial of Service Vulnerability CVE-2022-29117HighMicrosoft.AspNetCore.App.Runtime.win-x64: .NET Denial of Service Vulnerability CVE-2022-33916MediumOPCFoundation.NetStandard.Opc.Ua.Server: Exposure of Sensitive Information in OPCFoundation.NetStandard.Opc.Ua.Server CVE-2022-35909HighJellyfin.Common: Incorrect Access Control and Cross Site Scripting in Jellyfin CVE-2022-35540CriticalAgileConfig.Client: Use of Hard-coded Credentials in AgileConfig.Client CVE-2022-31160Mediumjquery-ui: jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label CVE-2022-30187MediumAzure.Storage.Queues: Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library CVE-2022-31129Highmoment: Moment.js vulnerable to Inefficient Regular Expression Complexity CVE-2024-21907HighNewtonsoft.Json: Improper Handling of Exceptional Conditions in Newtonsoft.Json CVE-2022-29863HighOPCFoundation.NetStandard.Opc.Ua.Core: Memory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core CVE-2022-29864HighOPCFoundation.NetStandard.Opc.Ua.Core: Uncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core CVE-2022-29865HighOPCFoundation.NetStandard.Opc.Ua.Core: Incorrect Implementation of Authentication Algorithm in OPCFoundation.NetStandard.Opc.Ua.Core CVE-2022-29866HighOPCFoundation.NetStandard.Opc.Ua.Core: Uncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core CVE-2022-29862HighOPCFoundation.NetStandard.Opc.Ua.Core: Security Update for the OPC UA .NET Standard Stack CVE-2022-30184MediumNuGet.Commands: Potential leak of NuGet.org API key CVE-2022-30349MediumSSCMS: Cross site scripting in SSCMS

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo