NuGet vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2018-1285Criticallog4net: XML External Entity attack in log4net CVE-2020-28042MediumServiceStack: Signature validation bypass in ServiceStack CVE-2021-21252Highjquery-validation: Regular Expression Denial of Service in jquery-validation CVE-2024-21911Mediumtinymce: Cross-site scripting vulnerability in TinyMCE CVE-2020-26293LowHtmlSanitizer: XSS in HtmlSanitizer CVE-2020-7791Highi18n: Denial of Service in i18n CVE-2020-16009HighCefSharp.Common: Inappropriate implementation in V8 CVE-2020-16017HighCefSharp.Common: Use after free in CefSharp CVE-2020-16013HighCefSharp.Common: Inappropriate implementation in V8 in CefSharp CVE-2020-15999MediumCefSharp.Common: Heap buffer overflow in CefSharp GHSA-QV8Q-V995-72GRLowpersonnummer: personnummer/csharp vulnerable to Improper Input Validation CVE-2012-6708Mediumjquery: Cross-Site Scripting in jquery CVE-2020-7685HighUmbracoForms: Insecure defaults in UmbracoForms CVE-2020-7656Mediumjquery-rails: Cross-Site Scripting in jquery CVE-2020-11023Mediumjquery: Potential XSS vulnerability in jQuery CVE-2020-11022Mediumjquery-rails: Potential XSS vulnerability in jQuery CVE-2020-5268MediumSustainsys.Saml2: Subject Confirmation Method not validated in Saml2 Authentication Services for ASP.NET CVE-2020-11005MediumHaemmerElectronics.SeppPenner.WindowsHello: Internal NCryptDecrypt method could be used externally from WindowsHello library.CVE-2020-5261HighSustainsys.Saml2: Missing Token Replay Detection in Saml2 Authentication services for ASP.NET CVE-2020-5234MediumMessagePack: Untrusted data can lead to DoS attack due to hash collisions and stack overflow in MessagePack CVE-2019-12562MediumDotNetNuke.Core: Stored Cross-Site Scripting vulnerability in admin component of DotNetNuke CVE-2019-16929HighAuth0.AuthenticationApi: Improper Authentication in Auth0.AuthenticationApi GHSA-CXW4-9QV9-VX5HHighPeterO.Cbor: High severity vulnerability that affects PeterO.Cbor CVE-2019-1301HighSystem.Management.Automation: High severity vulnerability that affects System.Management.Automation CVE-2018-1002206Mediumsharpcompress: Directory Traversal in SharpCompress

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.