NuGet Package Vulnerabilities

All 592 .NET packages with known CVEs, ranked by live CVE volume — 5,305 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 151.SharpCompress3 CVEs
  2. 152.SSH.NET3 CVEs
  3. 153.Steeltoe.Discovery.Eureka3 CVEs
  4. 154.Sustainsys.Saml23 CVEs
  5. 155.System.Private.Uri3 CVEs
  6. 156.System.Security.Cryptography.Pkcs3 CVEs
  7. 157.System.Text.Json3 CVEs
  8. 158.Umbraco.Cms.Core3 CVEs
  9. 159.UmbracoCms.Core3 CVEs
  10. 160.Umbraco.Cms.Web.BackOffice3 CVEs
  11. 161.wix3 CVEs
  12. 162.YAFNET.Core3 CVEs
  13. 163.Amazon.IonDotnet2 CVEs
  14. 164.Aspire.Cli2 CVEs
  15. 165.Aspire.Cli.linux-arm642 CVEs
  16. 166.Aspire.Cli.linux-musl-x642 CVEs
  17. 167.Aspire.Cli.linux-x642 CVEs
  18. 168.Aspire.Cli.osx-arm642 CVEs
  19. 169.Aspire.Cli.osx-x642 CVEs
  20. 170.CoreWCF.NetFramingBase2 CVEs
  21. 171.CoreWCF.UnixDomainSocket2 CVEs
  22. 172.Csla2 CVEs
  23. 173.DisCatSharp2 CVEs
  24. 174.DotNetNuke.Web2 CVEs
  25. 175.DotNetZip2 CVEs
  26. 176.Duende.IdentityServer2 CVEs
  27. 177.elFinder.NetCore2 CVEs
  28. 178.FormCMS2 CVEs
  29. 179.Google.Protobuf2 CVEs
  30. 180.ImageSharp2 CVEs
  31. 181.Marten2 CVEs
  32. 182.Metalama.Framework2 CVEs
  33. 183.Microsoft.AspNetCore.Components.WebAssembly.Server2 CVEs
  34. 184.Microsoft.AspNetCore.SignalR.Protocols.MessagePack2 CVEs
  35. 185.Microsoft.AspNetCore.SignalR.StackExchangeRedis2 CVEs
  36. 186.Microsoft.AspNetCore.WebUtilities2 CVEs
  37. 187.Microsoft.Build.Tasks.Core2 CVEs
  38. 188.Microsoft.Data.SqlClient2 CVEs
  39. 189.Microsoft.Identity.Client2 CVEs
  40. 190.Microsoft.NET.Build.Containers2 CVEs
  41. 191.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm2 CVEs
  42. 192.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm642 CVEs
  43. 193.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x642 CVEs
  44. 194.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x862 CVEs
  45. 195.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm2 CVEs
  46. 196.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm2 CVEs
  47. 197.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm642 CVEs
  48. 198.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x642 CVEs
  49. 199.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x862 CVEs
  50. 200.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm2 CVEs

Which NuGet packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →