HighCVSS 7.1
EPSS 1.1%
NuGet Client Remote Code Execution Vulnerability
Product
debian/nuget vulnerabilities
4 published CVES affecting debian/nuget, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 4
- Critical
- 0
- High
- 2
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest debian/nuget CVEs
Newest publication first
-
-
HighCVSS 7.8 EPSS 1.3%
NuGet Client Elevation of Privilege Vulnerability
-
MediumCVSS 5.5 EPSS 1.2%
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contents of the intermediate build folder (by default "obj"), aka 'NuGet Package Manager Tampering Vulnerability'.
-
MediumCVSS 6.5 EPSS 2.7%
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.