NuGet Package Vulnerabilities

All 562 .NET packages with known CVEs, ranked by live CVE volume — 4,934 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 351.Duende.AccessTokenManagement1 CVE
  2. 352.Duende.AccessTokenManagement.OpenIdConnect1 CVE
  3. 353.Elastic.Apm1 CVE
  4. 354.elFinder.AspNet1 CVE
  5. 355.elFinder.Net.Core1 CVE
  6. 356.EnumStringValues1 CVE
  7. 357.FastReport.OpenSource1 CVE
  8. 358.FullStackHero.WebAPI.Boilerplate1 CVE
  9. 359.git-credential-manager1 CVE
  10. 360.GleamTech.FileUltimate1 CVE
  11. 361.HaemmerElectronics.SeppPenner.WindowsHello1 CVE
  12. 362.Halibut1 CVE
  13. 363.Hangfire.Core1 CVE
  14. 364.HotChocolate.Language1 CVE
  15. 365.i18n1 CVE
  16. 366.ICG.AspNetCore.Utilities.CloudStorage1 CVE
  17. 367.IdentityServer41 CVE
  18. 368.IpMatcher1 CVE
  19. 369.Jellyfin.Common1 CVE
  20. 370.Jellyfin.Controller1 CVE
  21. 371.jquery1 CVE
  22. 372.jquery.cookie1 CVE
  23. 373.jQuery.Validation1 CVE
  24. 374.Kentor.AuthServices1 CVE
  25. 375.kiota1 CVE
  26. 376.KubernetesClient1 CVE
  27. 377.libpng1 CVE
  28. 378.LiteDB1 CVE
  29. 379.Lucene.Net.Replicator1 CVE
  30. 380.MadsKristensen.AspNetCore.Miniblog1 CVE
  31. 381.magick.net-q16-anycpu1 CVE
  32. 382.magick.net-q16-hdri-anycpu1 CVE
  33. 383.magick.net-q16-x641 CVE
  34. 384.magick.net-q8-anycpu1 CVE
  35. 385.magick.net-q8-openmp-x641 CVE
  36. 386.magick.net-q8-x641 CVE
  37. 387.Magick.NET-Q8-x86.NET-Q8-x641 CVE
  38. 388.Magick.NET-QMagick.NET-Q16-x8616-x641 CVE
  39. 389.MailKit1 CVE
  40. 390.Mammoth1 CVE
  41. 391.Marten1 CVE
  42. 392.Masuit.Tools.Core1 CVE
  43. 393.MediaBrowser.Server.Core1 CVE
  44. 394.MessagePack.ImmutableCollection1 CVE
  45. 395.MessagePack.ReactiveProperty1 CVE
  46. 396.MessagePack.Unity1 CVE
  47. 397.MessagePack.UnityShims1 CVE
  48. 398.MetadataExtractor1 CVE
  49. 399.Microsoft.AspNetCore.Authentication.JwtBearer1 CVE
  50. 400.Microsoft.AspNetCore.Components1 CVE

Which NuGet packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →