NuGet Package Vulnerabilities

All 578 .NET packages with known CVEs, ranked by live CVE volume — 4,929 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 451.Microsoft.NETCore.App.Runtime.android-arm641 CVE
  2. 452.Microsoft.NETCore.App.Runtime.android-x641 CVE
  3. 453.Microsoft.NETCore.App.Runtime.android-x861 CVE
  4. 454.Microsoft.NETCore.App.Runtime.ios-arm1 CVE
  5. 455.Microsoft.NETCore.App.Runtime.ios-x641 CVE
  6. 456.Microsoft.NETCore.App.Runtime.ios-x861 CVE
  7. 457.Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x641 CVE
  8. 458.Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x861 CVE
  9. 459.Microsoft.NETCore.App.Runtime.tvos-arm641 CVE
  10. 460.Microsoft.NETCore.App.Runtime.tvos-x641 CVE
  11. 461.Microsoft.NETCore.Jit1 CVE
  12. 462.Microsoft.NETCore.UniversalWindowsPlatform1 CVE
  13. 463.Microsoft.Net.Http.Server1 CVE
  14. 464.Microsoft.OpenApi1 CVE
  15. 465.Microsoft.OpenApi.Readers1 CVE
  16. 466.Microsoft.OpenApi.YamlReader1 CVE
  17. 467.Microsoft.Owin.Security.Cookies1 CVE
  18. 468.Microsoft.PowerBI.JavaScript1 CVE
  19. 469.Microsoft.PowerShell.SDK1 CVE
  20. 470.Microsoft.Rest.ClientRuntime1 CVE
  21. 471.Microsoft.SemanticKernel.Core1 CVE
  22. 472.Microsoft.SourceLink.AzureRepos.Git1 CVE
  23. 473.Microsoft.Windows.Compatibility1 CVE
  24. 474.Microsoft.WindowsDesktop.App.Ref1 CVE
  25. 475.MimeKit1 CVE
  26. 476.mongodb.driver1 CVE
  27. 477.MongoDB.Driver1 CVE
  28. 478.mono1 CVE
  29. 479.Nancy1 CVE
  30. 480.NCalc.Core1 CVE
  31. 481.NCalcSync1 CVE
  32. 482.Nerdbank.MessagePack1 CVE
  33. 483.NewRelic.Agent1 CVE
  34. 484.Newtonsoft.Json1 CVE
  35. 485.NHibernate1 CVE
  36. 486.Npgsql1 CVE
  37. 487.NuGet.CommandLine.XPlat1 CVE
  38. 488.NuGet.Common1 CVE
  39. 489.NuGet.PackageManagement1 CVE
  40. 490.NuGet.Packaging1 CVE
  41. 491.OPCFoundation.NetStandard.Opc.Ua.Bindings.Https1 CVE
  42. 492.OpenTelemetry.Exporter.Instana1 CVE
  43. 493.OpenTelemetry.Exporter.Jaeger1 CVE
  44. 494.OpenTelemetry.Exporter.OneCollector1 CVE
  45. 495.OpenTelemetry.Exporter.Zipkin1 CVE
  46. 496.OpenTelemetry.Extensions.Propagators1 CVE
  47. 497.OpenTelemetry.Instrumentation.AspNetCore1 CVE
  48. 498.OpenTelemetry.Instrumentation.Http1 CVE
  49. 499.OpenTelemetry.OpAmp.Client1 CVE
  50. 500.OpenTelemetry.Resources.AWS1 CVE

Which NuGet packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →