NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2016-7240HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2016-7242HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2016-7243HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2018-8315MediumMicrosoft.ChakraCore: ChakraCore information disclosure vulnerability CVE-2018-15121HighAuth0-ASPNET-Owin: Auth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request Forgery CVE-2018-17256Mediumumbraco: Umbraco CMS vulnerable to stored XSS CVE-2019-0564HighMicrosoft.AspNetCore.WebSockets: Denial of service in ASP.NET Core CVE-2019-0545HighMicrosoft.NETCore.App: Exposure of Sensitive Information in System.Net.Http CVE-2019-0657MediumMicrosoft.NETCore.App: Improper Input Validation in .Net Framework API's CVE-2018-14486MediumDotNetNuke.Core: DNN XSS Vulnerability CVE-2011-4969Mediumjquery: jQuery vulnerable to Cross-Site Scripting (XSS)CVE-2017-11911HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2017-11914HighMicrosoft.ChakraCore: ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction CVE-2017-11909HighMicrosoft.ChakraCore: ChakraCore vulnerable to remote code execution CVE-2017-11893HighMicrosoft.ChakraCore: ChakraCore vulnerable to remote code execution CVE-2018-1000120Criticalcurl: curl FTP path confusion leads to NIL byte out of bounds write CVE-2019-9648MediumCoreFtp: CoreFTP Directory Traversal CVE-2018-8452MediumMicrosoft.ChakraCore: ChakraCore information disclosure vulnerability CVE-2018-8276MediumMicrosoft.ChakraCore: ChakraCore Security Bypass CVE-2018-8145HighMicrosoft.ChakraCore: ChakraCore information disclosure vulnerability CVE-2018-0818HighMicrosoft.ChakraCore: ChakraCore RCE Vulnerability CVE-2017-8700HighMicrosoft.AspNetCore.Mvc.Core: Cross-origin Resource Sharing bypass in ASP.NET Core CVE-2017-11883HighMicrosoft.AspNetCore.Server.WebListener: Denial of service in ASP.NET Core CVE-2017-11767CriticalMicrosoft.ChakraCore: ChakraCore vulnerable to privilege escalation CVE-2018-1002208MediumSharpZipLib: Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo