Nuget

This hub aggregates every CVE we track for Nuget, a product in the devtools ci space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 7 most recently published vulnerabilities affecting Nuget.

• CVE-2023-29337NuGet Client Remote Code Execution Vulnerability7.1Jun 14, 2023
• CVE-2022-41064.NET Framework Information Disclosure Vulnerability5.8Nov 9, 2022
• CVE-2022-30184.NET and Visual Studio Information Disclosure Vulnerability5.5Jun 15, 2022
• CVE-2021-21658Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.9.1May 25, 2021
• CVE-2019-1258Azure Active Directory Authentication Library Elevation of Privilege Vulnerability8.8Aug 14, 2019
• CVE-2019-0976A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contents of the intermediate build folder (by default "obj"), ak...5.5May 16, 2019
• CVE-2019-0757A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager T...6.5Apr 9, 2019