NuGet Package Vulnerabilities

All 592 .NET packages with known CVEs, ranked by live CVE volume — 5,305 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 101.Microsoft.NETCore.App.Runtime.Mono.osx-x645 CVEs
  2. 102.Microsoft.NETCore.App.Runtime.rhel.6-x645 CVEs
  3. 103.OPCFoundation.NetStandard.Opc.Ua5 CVEs
  4. 104.System.Net.Http5 CVEs
  5. 105.System.Text.Encodings.Web5 CVEs
  6. 106.UmbracoCms5 CVEs
  7. 107.BouncyCastle4 CVEs
  8. 108.Microsoft.AspNetCore.Mvc4 CVEs
  9. 109.Microsoft.AspNetCore.Mvc.Abstractions4 CVEs
  10. 110.Microsoft.AspNetCore.Mvc.ApiExplorer4 CVEs
  11. 111.Microsoft.AspNetCore.Mvc.DataAnnotations4 CVEs
  12. 112.Microsoft.AspNetCore.Mvc.Formatters.Json4 CVEs
  13. 113.Microsoft.AspNetCore.Mvc.Formatters.Xml4 CVEs
  14. 114.Microsoft.AspNetCore.Mvc.Localization4 CVEs
  15. 115.Microsoft.AspNetCore.Mvc.Razor4 CVEs
  16. 116.Microsoft.AspNetCore.Mvc.Razor.Host4 CVEs
  17. 117.Microsoft.AspNetCore.Mvc.TagHelpers4 CVEs
  18. 118.Microsoft.AspNetCore.Mvc.ViewFeatures4 CVEs
  19. 119.Microsoft.AspNetCore.Mvc.WebApiCompatShim4 CVEs
  20. 120.Microsoft.AspNetCore.Server.Kestrel.Core4 CVEs
  21. 121.net.sf.mpxj4 CVEs
  22. 122.net.sf.mpxj-for-csharp4 CVEs
  23. 123.net.sf.mpxj-for-vb4 CVEs
  24. 124.NuGet.CommandLine4 CVEs
  25. 125.NuGet.Commands4 CVEs
  26. 126.Serenity.Net.Core4 CVEs
  27. 127.SharpZipLib4 CVEs
  28. 128.Snowflake.Data4 CVEs
  29. 129.SSCMS4 CVEs
  30. 130.Steeltoe.Management.Endpoint4 CVEs
  31. 131.System.Net.Http.WinHttpHandler4 CVEs
  32. 132.System.Net.Security4 CVEs
  33. 133.System.Net.WebSockets.Client4 CVEs
  34. 134.UmbracoForms4 CVEs
  35. 135.Umbraco.Forms4 CVEs
  36. 136.AjaxNetProfessional3 CVEs
  37. 137.Azure.Identity3 CVEs
  38. 138.BouncyCastle.Cryptography3 CVEs
  39. 139.HtmlSanitizer3 CVEs
  40. 140.log4net3 CVEs
  41. 141.Microsoft.AspNetCore.Authentication.Negotiate3 CVEs
  42. 142.Microsoft.AspNetCore.Http.Connections3 CVEs
  43. 143.Microsoft.AspNetCore.Identity3 CVEs
  44. 144.Microsoft.AspNetCore.Server.HttpSys3 CVEs
  45. 145.Microsoft.DiaSymReader.Native3 CVEs
  46. 146.MPXJ.Net3 CVEs
  47. 147.OPCFoundation.NetStandard.Opc.Ua.Server3 CVEs
  48. 148.OpenTelemetry.Exporter.OpenTelemetryProtocol3 CVEs
  49. 149.Oqtane.Framework3 CVEs
  50. 150.Oqtane.Server3 CVEs

Which NuGet packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →