Nuget
797 CVEs tracked since 2010. Since Feb 2020, 7 of them reached CISA KEV.
Nuget CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2020-02 | 8 | 0 |
| 2020-03 | 19 | 0 |
| 2020-04 | no snapshot | |
| 2020-05 | no snapshot | |
| 2020-06 | 2 or fewer | |
| 2020-07 | no snapshot | |
| 2020-08 | 2 or fewer | |
| 2020-09 | 7 | 0 |
| 2020-10 | 1 or fewer | |
| 2020-11 | 5 | 2 |
| 2020-12 | 6 | 0 |
| 2021-01 | 5 | 2 |
| 2021-02 | 4 | 0 |
| 2021-03 | no snapshot | |
| 2021-04 | 2 or fewer | |
| 2021-05 | 3 | 0 |
| 2021-06 | 2 or fewer | |
| 2021-07 | 3 | 0 |
| 2021-08 | 3 | 0 |
| 2021-09 | 5 | 0 |
| 2021-10 | 5 | 0 |
| 2021-11 | 6 | 0 |
| 2021-12 | 4 | 0 |
| 2022-01 | 9 | 0 |
| 2022-02 | 2 or fewer | |
| 2022-03 | 6 | 0 |
| 2022-04 | 6 | 1 |
| 2022-05 | 11 | 0 |
| 2022-06 | 6 | 0 |
| 2022-07 | 3 | 0 |
| 2022-08 | 5 | 0 |
| 2022-09 | 3 | 0 |
| 2022-10 | 2 or fewer | |
| 2022-11 | 3 | 0 |
| 2022-12 | 6 | 0 |
| 2023-01 | 4 | 0 |
| 2023-02 | 3 or fewer | |
| 2023-03 | no snapshot | |
| 2023-04 | 5 | 0 |
| 2023-05 | 3 or fewer | |
| 2023-06 | 11 | 0 |
| 2023-07 | 3 or fewer | |
| 2023-08 | 5 | 1 |
| 2023-09 | 9 | 1 |
| 2023-10 | 10 | 0 |
| 2023-11 | 4 | 0 |
| 2023-12 | 13 | 0 |
| 2024-01 | 15 | 0 |
| 2024-02 | 8 | 0 |
| 2024-03 | 11 | 0 |
| 2024-04 | 8 | 0 |
| 2024-05 | 12 | 0 |
| 2024-06 | 5 | 0 |
| 2024-07 | 16 | 0 |
| 2024-08 | 6 | 0 |
| 2024-09 | 3 or fewer | |
| 2024-10 | 17 | 0 |
| 2024-11 | 10 | 0 |
| 2024-12 | 7 | 0 |
| 2025-01 | 11 | 0 |
| 2025-02 | 9 | 0 |
| 2025-03 | 7 | 0 |
| 2025-04 | 8 | 0 |
| 2025-05 | 6 | 0 |
| 2025-06 | 9 | 0 |
| 2025-07 | 6 | 0 |
| 2025-08 | 7 | 0 |
| 2025-09 | 9 | 0 |
| 2025-10 | 16 | 0 |
| 2025-11 | 4 or fewer | |
| 2025-12 | 13 | 0 |
| 2026-01 | 13 | 0 |
| 2026-02 | 46 | 0 |
| 2026-03 | 43 | 0 |
| 2026-04 | 18 | 0 |
| 2026-05 | 9 | 0 |
| 2026-06 | 7 or fewer | |
| 2026-07 | 24 | 0 |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 11 or fewer | |
| 2026-11 | 0 |
Products
The products that kept showing up in Nuget's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Nuget.
- GHSA-p3jp-9v83-76w9Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability—
- GHSA-473q-m89c-ghf8MySqlConnector: Account password disclosed to a man-in-the-middle in zero-configuration TLS mode (clear-text password sent before certificate is verified)—
- GHSA-86xp-94pg-8r6rMicrosoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability—
- GHSA-cvhv-g4rq-3hmwImageMagick: Memory Leak when providing invalid options to the cli—
- GHSA-pfvm-w89x-94jwSIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)—
- GHSA-jwjp-4649-v8jpSIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing—
- GHSA-464c-974j-9xm6AWS CDK CodeBuild S3 Log Encryption Boolean Inversion—
- GHSA-p5rm-jg5c-8c77Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)—
- GHSA-76q6-2p6h-xjqrImageMagick: Heap Buffer Over-Write in X11 import with crafted window title—
- GHSA-h5r4-w88w-7ccrImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified—
- GHSA-h58x-r7f7-rh84ImageMagick: Memory Leak in ICON decoder when allocation fails—
- GHSA-m596-67p7-69whImageMagick: Memory leak in VIFF encoder when allocation fails—
- GHSA-r628-69v2-2f9cImageMagick: Memory Leak in MIFF encoder when allocaton fails—
- GHSA-h7f2-f9cc-h2gvImageMagick: Memory Leak in YUV decoder when opening of blob fails—
- GHSA-jfq9-q63x-rc63ImageMagick: Memory Leak in TIFF encoder when an allocation fails—
The record
- Peak rank
- #17 in Feb 2026
- Busiest month shown
- Feb 2026, 46 CVEs
- Months with a KEV entry
- 5 since Feb 2020
- Monthly snapshots
- 93 since 2010