NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-29245MediumSSH.NET: Weak private key generation in SSH.NETCVE-2022-29362MediumZKEACMS.Publisher: Cross-site Scripting in ZKEACMSCVE-2021-42655HighSSCMS: SQL injection in SiteServer CMSCVE-2021-42656MediumSSCMS: Cross site scripting in SiteServer CMSCVE-2020-0813HighMicrosoft.ChakraCore: ChakraCore information disclosure vulnerabilityCVE-2019-0976MediumNuGet.Commands: NuGet Package Manager Tampering VulnerabilityCVE-2019-1302MediumMicrosoft.AspNetCore.SpaServices: Elevation of privilege in ASP.NET CoreCVE-2019-1010199MediumServiceStack: Cross site scripting attack in ServiceStack FrameworkCVE-2019-1052HighMicrosoft.ChakraCore: Chakra Scripting Engine RCE via Out-of-bounds writeCVE-2019-1002HighMicrosoft.ChakraCore: ChakraCore RCE via Out-of-bounds writeCVE-2019-1024HighMicrosoft.ChakraCore: Chakra Scripting Engine RCE VulnerabilityCVE-2019-1051HighMicrosoft.ChakraCore: Chakra Scripting Engine RCE via Out-of-bounds writeCVE-2021-42279HighMicrosoft.ChakraCore: Chakra Scripting Engine and ChakraCore Vulnerable to Memory CorruptionCVE-2021-20331Mediummongodb.driver: MongoDB C# Driver Risk of Exposing Authentication Data via Command ListenerCVE-2021-24112CriticalSystem.Drawing.Common: .NET Core Remote Code Execution VulnerabilityCVE-2021-1721MediumMicrosoft.NETCore.App: Denial of service in .NET coreCVE-2021-1723HighMicrosoft.AspNetCore.Server.Kestrel.Core: ASP.NET Core and Visual Studio Denial of Service VulnerabilityCVE-2020-5809MediumUmbracoCms.Core: Umbraco CMS vulnerable to stored XSSCVE-2020-20136CriticalQuantConnect.Common: QuantConnect Lean vulnerable to insecure deserializationCVE-2020-8927Mediumcompu-brotli-sys: Integer overflow in the bundled Brotli C libraryCVE-2020-1045HighMicrosoft.AspNetCore.App: Cookie parsing failureCVE-2020-1597HighMicrosoft.AspNetCore.App: ASP.NET Core Denial of Service VulnerabilityCVE-2020-1147HighMicrosoft.NETCore.App: .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution VulnerabilityCVE-2020-15015MediumGleamTech.FileUltimate: GleamTech FileUltimate Cross-site ScriptingCVE-2020-1073HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability

Stop the waste.
Protect your environment with Kodem.