NuGet Package Vulnerabilities

All 562 .NET packages with known CVEs, ranked by live CVE volume — 4,934 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 101.OPCFoundation.NetStandard.Opc.Ua5 CVEs
  2. 102.System.Net.Http5 CVEs
  3. 103.System.Text.Encodings.Web5 CVEs
  4. 104.UmbracoCms5 CVEs
  5. 105.BouncyCastle4 CVEs
  6. 106.Microsoft.AspNetCore.Mvc4 CVEs
  7. 107.Microsoft.AspNetCore.Mvc.Abstractions4 CVEs
  8. 108.Microsoft.AspNetCore.Mvc.ApiExplorer4 CVEs
  9. 109.Microsoft.AspNetCore.Mvc.DataAnnotations4 CVEs
  10. 110.Microsoft.AspNetCore.Mvc.Formatters.Json4 CVEs
  11. 111.Microsoft.AspNetCore.Mvc.Formatters.Xml4 CVEs
  12. 112.Microsoft.AspNetCore.Mvc.Localization4 CVEs
  13. 113.Microsoft.AspNetCore.Mvc.Razor4 CVEs
  14. 114.Microsoft.AspNetCore.Mvc.Razor.Host4 CVEs
  15. 115.Microsoft.AspNetCore.Mvc.TagHelpers4 CVEs
  16. 116.Microsoft.AspNetCore.Mvc.ViewFeatures4 CVEs
  17. 117.Microsoft.AspNetCore.Mvc.WebApiCompatShim4 CVEs
  18. 118.Microsoft.AspNetCore.Server.Kestrel.Core4 CVEs
  19. 119.NuGet.CommandLine4 CVEs
  20. 120.NuGet.Commands4 CVEs
  21. 121.Serenity.Net.Core4 CVEs
  22. 122.SharpZipLib4 CVEs
  23. 123.Snowflake.Data4 CVEs
  24. 124.SSCMS4 CVEs
  25. 125.System.Net.Http.WinHttpHandler4 CVEs
  26. 126.System.Net.Security4 CVEs
  27. 127.System.Net.WebSockets.Client4 CVEs
  28. 128.UmbracoForms4 CVEs
  29. 129.Umbraco.Forms4 CVEs
  30. 130.AjaxNetProfessional3 CVEs
  31. 131.Azure.Identity3 CVEs
  32. 132.BouncyCastle.Cryptography3 CVEs
  33. 133.HtmlSanitizer3 CVEs
  34. 134.log4net3 CVEs
  35. 135.Microsoft.AspNetCore.Identity3 CVEs
  36. 136.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm3 CVEs
  37. 137.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm643 CVEs
  38. 138.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x643 CVEs
  39. 139.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x863 CVEs
  40. 140.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm3 CVEs
  41. 141.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm3 CVEs
  42. 142.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm643 CVEs
  43. 143.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x643 CVEs
  44. 144.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x863 CVEs
  45. 145.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm3 CVEs
  46. 146.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm3 CVEs
  47. 147.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm643 CVEs
  48. 148.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm643 CVEs
  49. 149.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x643 CVEs
  50. 150.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x863 CVEs

Which NuGet packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →