Vendor
2,014 published CVES affecting nuget, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first · page 1 of 40 · showing the latest 1,000
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory provides guidance on updating affected applications and components. The VSTest artifact postprocessor can consume a forged executionComplete.json fr...
Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally.
Insertion of sensitive information into log file in Aspire allows an authorized attacker to disclose information locally.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Insertion of sensitive information into sent data in .NET Aspire allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges locally.
Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Time-of-check time-of-use (toctou) race condition in .NET allows an authorized attacker to elevate privileges locally.
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.
Use of uninitialized resource in ASP.NET Core allows an unauthorized attacker to disclose information over a network.
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Cross-site request forgery (csrf) in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.