NuGet Package Vulnerabilities

All 537 .NET packages with known CVEs, ranked by live CVE volume — 3,087 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 101.Microsoft.AspNetCore.Mvc4 CVEs
  2. 102.Microsoft.AspNetCore.Mvc.Abstractions4 CVEs
  3. 103.Microsoft.AspNetCore.Mvc.ApiExplorer4 CVEs
  4. 104.Microsoft.AspNetCore.Mvc.DataAnnotations4 CVEs
  5. 105.Microsoft.AspNetCore.Mvc.Formatters.Json4 CVEs
  6. 106.Microsoft.AspNetCore.Mvc.Formatters.Xml4 CVEs
  7. 107.Microsoft.AspNetCore.Mvc.Localization4 CVEs
  8. 108.Microsoft.AspNetCore.Mvc.Razor4 CVEs
  9. 109.Microsoft.AspNetCore.Mvc.Razor.Host4 CVEs
  10. 110.Microsoft.AspNetCore.Mvc.TagHelpers4 CVEs
  11. 111.Microsoft.AspNetCore.Mvc.ViewFeatures4 CVEs
  12. 112.Microsoft.AspNetCore.Mvc.WebApiCompatShim4 CVEs
  13. 113.Microsoft.AspNetCore.Server.Kestrel.Core4 CVEs
  14. 114.NuGet.CommandLine4 CVEs
  15. 115.NuGet.Commands4 CVEs
  16. 116.Serenity.Net.Core4 CVEs
  17. 117.SharpZipLib4 CVEs
  18. 118.Snowflake.Data4 CVEs
  19. 119.SSCMS4 CVEs
  20. 120.System.Net.Http.WinHttpHandler4 CVEs
  21. 121.System.Net.Security4 CVEs
  22. 122.System.Net.WebSockets.Client4 CVEs
  23. 123.UmbracoForms4 CVEs
  24. 124.Umbraco.Forms4 CVEs
  25. 125.AjaxNetProfessional3 CVEs
  26. 126.Azure.Identity3 CVEs
  27. 127.BouncyCastle.Cryptography3 CVEs
  28. 128.HtmlSanitizer3 CVEs
  29. 129.log4net3 CVEs
  30. 130.Microsoft.AspNetCore.Identity3 CVEs
  31. 131.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm3 CVEs
  32. 132.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm643 CVEs
  33. 133.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x643 CVEs
  34. 134.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x863 CVEs
  35. 135.Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm3 CVEs
  36. 136.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm3 CVEs
  37. 137.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm643 CVEs
  38. 138.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x643 CVEs
  39. 139.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x863 CVEs
  40. 140.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm3 CVEs
  41. 141.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm3 CVEs
  42. 142.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm643 CVEs
  43. 143.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm643 CVEs
  44. 144.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x643 CVEs
  45. 145.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x863 CVEs
  46. 146.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm643 CVEs
  47. 147.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x643 CVEs
  48. 148.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm643 CVEs
  49. 149.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm643 CVEs
  50. 150.Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x643 CVEs

Which NuGet packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →