NuGet vulnerabilities
4 published CVEs name NuGet among the affected products.
- 4Published CVEs4 of them scored
- 1Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-39399
NuGet Gallery: Arbitrary Blob Overwrite via Nuspec Confusion and URI Fragment Truncation
NuGet · NuGetGallery
Critical9.6 - CVE-2024-54138
XSS Vulnerability in NuGetGallery's Markdown Autolinks Processing
NuGet · NuGetGallery
Medium6.9 - CVE-2024-47604
XSS vulnerability in NuGetGallery HTML attributes handling
NuGet · NuGetGallery
High8.2 - CVE-2024-37304
NuGetGallery's Markdown Autolinks Processing Vulnerable to Cross-site Scripting
NuGet · NuGetGallery
Medium6.1