NuGet Package Vulnerabilities

All 578 .NET packages with known CVEs, ranked by live CVE volume — 4,929 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 151.Sustainsys.Saml23 CVEs
  2. 152.System.Private.Uri3 CVEs
  3. 153.Umbraco.Cms.Core3 CVEs
  4. 154.UmbracoCms.Core3 CVEs
  5. 155.Umbraco.Cms.Web.BackOffice3 CVEs
  6. 156.wix3 CVEs
  7. 157.YAFNET.Core3 CVEs
  8. 158.Amazon.IonDotnet2 CVEs
  9. 159.CoreWCF.NetFramingBase2 CVEs
  10. 160.CoreWCF.UnixDomainSocket2 CVEs
  11. 161.Csla2 CVEs
  12. 162.DisCatSharp2 CVEs
  13. 163.DotNetNuke.Web2 CVEs
  14. 164.DotNetZip2 CVEs
  15. 165.Duende.IdentityServer2 CVEs
  16. 166.elFinder.NetCore2 CVEs
  17. 167.FormCMS2 CVEs
  18. 168.Google.Protobuf2 CVEs
  19. 169.ImageSharp2 CVEs
  20. 170.Marten2 CVEs
  21. 171.Metalama.Framework2 CVEs
  22. 172.Microsoft.AspNetCore.Authentication.Negotiate2 CVEs
  23. 173.Microsoft.AspNetCore.Http.Connections2 CVEs
  24. 174.Microsoft.AspNetCore.Server.HttpSys2 CVEs
  25. 175.Microsoft.AspNetCore.SignalR.Protocols.MessagePack2 CVEs
  26. 176.Microsoft.Build.Tasks.Core2 CVEs
  27. 177.Microsoft.Data.SqlClient2 CVEs
  28. 178.Microsoft.Identity.Client2 CVEs
  29. 179.Microsoft.NET.Build.Containers2 CVEs
  30. 180.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm2 CVEs
  31. 181.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm642 CVEs
  32. 182.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x642 CVEs
  33. 183.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x862 CVEs
  34. 184.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm2 CVEs
  35. 185.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm2 CVEs
  36. 186.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm642 CVEs
  37. 187.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x642 CVEs
  38. 188.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x862 CVEs
  39. 189.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm2 CVEs
  40. 190.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm2 CVEs
  41. 191.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm642 CVEs
  42. 192.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm642 CVEs
  43. 193.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x642 CVEs
  44. 194.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x862 CVEs
  45. 195.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm642 CVEs
  46. 196.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x642 CVEs
  47. 197.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm642 CVEs
  48. 198.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm642 CVEs
  49. 199.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x642 CVEs
  50. 200.Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm2 CVEs

Which NuGet packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →