Nuget

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 4
    Known Exploited: 0
    2
    Critical Level Threats
    0
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-39399

    NuGet Gallery: Arbitrary Blob Overwrite via Nuspec Confusion and URI Fragment Truncation

    Last Modified: Apr 17, 2026
    Published: Apr 14, 2026

    CVE-2024-54138

    XSS Vulnerability in NuGetGallery's Markdown Autolinks Processing

    Last Modified: Sep 05, 2025
    Published: Dec 06, 2024

    CVE-2024-48510

    Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

    Last Modified: May 02, 2025
    Published: Nov 13, 2024

    CVE-2024-37304

    NuGetGallery's Markdown Autolinks Processing Vulnerable to Cross-site Scripting

    Last Modified: Sep 04, 2025
    Published: Jun 12, 2024
    Items Per Page
    Nuget Vulnerabilities & Security CVEs | CVE-DB