NuGet Package Vulnerabilities

All 592 .NET packages with known CVEs, ranked by live CVE volume — 5,305 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 301.System.Management.Automation2 CVEs
  2. 302.System.Private.ServiceModel2 CVEs
  3. 303.System.Security.Cryptography.Cose2 CVEs
  4. 304.System.ServiceModel.Duplex2 CVEs
  5. 305.System.ServiceModel.Http2 CVEs
  6. 306.System.ServiceModel.NetTcp2 CVEs
  7. 307.System.ServiceModel.Primitives2 CVEs
  8. 308.System.ServiceModel.Security2 CVEs
  9. 309.UmbracoCMS2 CVEs
  10. 310.Umbraco.Cms.Api.Management2 CVEs
  11. 311.UmbracoCMS.Core2 CVEs
  12. 312.Umbraco.Cms.StaticAssets2 CVEs
  13. 313.Yarp.ReverseProxy2 CVEs
  14. 314.adplug1 CVE
  15. 315.agick.NET-Q8-x641 CVE
  16. 316.agick.NET-Q8-x861 CVE
  17. 317.AgileConfig.Client1 CVE
  18. 318.Akka.Cluster1 CVE
  19. 319.Akka.Remote1 CVE
  20. 320.AlastairLundy.CliInvoke1 CVE
  21. 321.AlastairLundy.CliInvoke.Specializations1 CVE
  22. 322.Amazon.Extensions.S3.Encryption1 CVE
  23. 323.AngleSharp1 CVE
  24. 324.Apache.Avro1 CVE
  25. 325.Apache.NMS.ActiveMQ1 CVE
  26. 326.Apache.NMS.AMQP1 CVE
  27. 327.Aspire.Hosting1 CVE
  28. 328.Aspire.Hosting.AppHost1 CVE
  29. 329.auth0-aspnet1 CVE
  30. 330.Auth0-ASPNET-Owin1 CVE
  31. 331.Auth0.AuthenticationApi1 CVE
  32. 332.Auth0-WCF-Service-JWT1 CVE
  33. 333.AutoMapper1 CVE
  34. 334.AutoQueryable1 CVE
  35. 335.Autoupdater.NET.Official1 CVE
  36. 336.AWSSDK.Core1 CVE
  37. 337.Azure.Mcp1 CVE
  38. 338.Azure.Storage.Blobs1 CVE
  39. 339.Azure.Storage.Queues1 CVE
  40. 340.Blogifier.Core1 CVE
  41. 341.Bond.Core.CSharp1 CVE
  42. 342.Bootstrap.Less1 CVE
  43. 343.bootstrap-select1 CVE
  44. 344.Bunkum1 CVE
  45. 345.C1CMS.Assemblies1 CVE
  46. 346.CefSharp.Common.NETCore1 CVE
  47. 347.CefSharp.OffScreen1 CVE
  48. 348.CefSharp.OffScreen.NETCore1 CVE
  49. 349.CefSharp.WinForms.NETCore1 CVE
  50. 350.CefSharp.Wpf.NETCore1 CVE

Which NuGet packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →