NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2017-11797HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2017-11801HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2017-11792HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2017-11821HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2017-11806HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2017-11805HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2017-11796HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2017-11807HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2017-15279MediumUmbracoCMS.Web: Umbraco CMS vulnerable to stored XSS CVE-2017-15280MediumUmbracoCms.Web: Umbraco CMS XXE Vulnerability CVE-2017-11862HighMicrosoft.ChakraCore: Chakra Core vulnerable to privilege escalation due to type confusion CVE-2017-11870HighMicrosoft.ChakraCore: Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects CVE-2017-11871HighMicrosoft.ChakraCore: Chakra Core vulnerable to privilege escalation due to reading an invalid pointer CVE-2017-8585HighMicrosoft.NETCore.App: Improper Input Validation in Microsoft.NETCore.App CVE-2017-11910HighMicrosoft.ChakraCore: ChakraCore vulnerable to remote code execution due to insufficient InlineCache check CVE-2017-11916HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2017-11908HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2021-33318CriticalIpMatcher: Improper Input Validation in IpMatcher CVE-2017-11905HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2017-11889HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2017-11879HighMicrosoft.AspNetCore.All: Open redirect in ASP.NET Core CVE-2018-8356MediumSystem.Private.ServiceModel: Improper Certificate Validation in Microsoft .NET Framework components CVE-2008-6540MediumDotNetNuke.Core: DotNetNuke Default Machine Key Exposure CVE-2016-0024HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2016-0186HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo