NuGet Package Vulnerabilities

All 592 .NET packages with known CVEs, ranked by live CVE volume — 5,305 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 501.Npgsql1 CVE
  2. 502.NuGet.CommandLine.XPlat1 CVE
  3. 503.NuGet.Common1 CVE
  4. 504.NuGet.PackageManagement1 CVE
  5. 505.NuGet.Packaging1 CVE
  6. 506.OPCFoundation.NetStandard.Opc.Ua.Bindings.Https1 CVE
  7. 507.OpenTelemetry.Exporter.Instana1 CVE
  8. 508.OpenTelemetry.Exporter.Jaeger1 CVE
  9. 509.OpenTelemetry.Exporter.OneCollector1 CVE
  10. 510.OpenTelemetry.Exporter.Zipkin1 CVE
  11. 511.OpenTelemetry.Extensions.Propagators1 CVE
  12. 512.OpenTelemetry.Instrumentation.AspNetCore1 CVE
  13. 513.OpenTelemetry.Instrumentation.Http1 CVE
  14. 514.OpenTelemetry.OpAmp.Client1 CVE
  15. 515.OpenTelemetry.Resources.AWS1 CVE
  16. 516.OpenTelemetry.Resources.Azure1 CVE
  17. 517.OpenTelemetry.Resources.Host1 CVE
  18. 518.OpenTelemetry.Sampler.AWS1 CVE
  19. 519.Oqtane.Client1 CVE
  20. 520.Oqtane.Shared1 CVE
  21. 521.Oracle.ManagedDataAccess1 CVE
  22. 522.Oracle.ManagedDataAccess.Core1 CVE
  23. 523.OrchardCore.Application.Cms.Targets1 CVE
  24. 524.OWASP.AntiSamy1 CVE
  25. 525.ParquetSharp1 CVE
  26. 526.PeterO.Cbor1 CVE
  27. 527.Plumber.Workflow1 CVE
  28. 528.ProDotNetZip1 CVE
  29. 529.Prompty.Core1 CVE
  30. 530.Pubnub1 CVE
  31. 531.QuantConnect.Common1 CVE
  32. 532.RazorEngine1 CVE
  33. 533.recurly-api-client1 CVE
  34. 534.Refit1 CVE
  35. 535.Serenity.Net.Services1 CVE
  36. 536.Serilog.Enrichers.ClientInfo1 CVE
  37. 537.set-value-nuget1 CVE
  38. 538.SinGooCMS.Utility1 CVE
  39. 539.SkiaSharp1 CVE
  40. 540.Smidge1 CVE
  41. 541.SPID.AspNetCore.Authentication1 CVE
  42. 542.SQLitePCLRaw.lib.e_sqlite31 CVE
  43. 543.SQLitePCLRaw.lib.e_sqlite3.android1 CVE
  44. 544.SQLitePCLRaw.lib.e_sqlite3.ios1 CVE
  45. 545.sscms1 CVE
  46. 546.starkbank-ecdsa1 CVE
  47. 547.Steeltoe.Configuration.Abstractions1 CVE
  48. 548.Steeltoe.Configuration.Encryption1 CVE
  49. 549.Steeltoe.Discovery.ClientAutofac1 CVE
  50. 550.Steeltoe.Discovery.ClientCore1 CVE

Which NuGet packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →