NuGet Package Vulnerabilities

All 573 .NET packages with known CVEs, ranked by live CVE volume — 5,014 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 101.OPCFoundation.NetStandard.Opc.Ua5 CVEs
  2. 102.System.Net.Http5 CVEs
  3. 103.System.Text.Encodings.Web5 CVEs
  4. 104.UmbracoCms5 CVEs
  5. 105.BouncyCastle4 CVEs
  6. 106.Microsoft.AspNetCore.Mvc4 CVEs
  7. 107.Microsoft.AspNetCore.Mvc.Abstractions4 CVEs
  8. 108.Microsoft.AspNetCore.Mvc.ApiExplorer4 CVEs
  9. 109.Microsoft.AspNetCore.Mvc.DataAnnotations4 CVEs
  10. 110.Microsoft.AspNetCore.Mvc.Formatters.Json4 CVEs
  11. 111.Microsoft.AspNetCore.Mvc.Formatters.Xml4 CVEs
  12. 112.Microsoft.AspNetCore.Mvc.Localization4 CVEs
  13. 113.Microsoft.AspNetCore.Mvc.Razor4 CVEs
  14. 114.Microsoft.AspNetCore.Mvc.Razor.Host4 CVEs
  15. 115.Microsoft.AspNetCore.Mvc.TagHelpers4 CVEs
  16. 116.Microsoft.AspNetCore.Mvc.ViewFeatures4 CVEs
  17. 117.Microsoft.AspNetCore.Mvc.WebApiCompatShim4 CVEs
  18. 118.Microsoft.AspNetCore.Server.Kestrel.Core4 CVEs
  19. 119.Microsoft.Native.Quic.MsQuic.OpenSSL4 CVEs
  20. 120.net.sf.mpxj4 CVEs
  21. 121.net.sf.mpxj-for-csharp4 CVEs
  22. 122.net.sf.mpxj-for-vb4 CVEs
  23. 123.NuGet.CommandLine4 CVEs
  24. 124.NuGet.Commands4 CVEs
  25. 125.Serenity.Net.Core4 CVEs
  26. 126.SharpZipLib4 CVEs
  27. 127.Snowflake.Data4 CVEs
  28. 128.SSCMS4 CVEs
  29. 129.Steeltoe.Management.Endpoint4 CVEs
  30. 130.System.Net.Http.WinHttpHandler4 CVEs
  31. 131.System.Net.Security4 CVEs
  32. 132.System.Net.WebSockets.Client4 CVEs
  33. 133.UmbracoForms4 CVEs
  34. 134.Umbraco.Forms4 CVEs
  35. 135.AjaxNetProfessional3 CVEs
  36. 136.Azure.Identity3 CVEs
  37. 137.BouncyCastle.Cryptography3 CVEs
  38. 138.HtmlSanitizer3 CVEs
  39. 139.log4net3 CVEs
  40. 140.Microsoft.AspNetCore.Identity3 CVEs
  41. 141.Microsoft.DiaSymReader.Native3 CVEs
  42. 142.Microsoft.Native.Quic.MsQuic.Schannel3 CVEs
  43. 143.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm3 CVEs
  44. 144.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm643 CVEs
  45. 145.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x643 CVEs
  46. 146.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x863 CVEs
  47. 147.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm3 CVEs
  48. 148.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm3 CVEs
  49. 149.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm643 CVEs
  50. 150.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x643 CVEs

Which NuGet packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →