# NuGet package vulnerabilities Source: https://junglewise.ai/threats/vendors/nuget Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 01:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/nuget.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 1,194 vulnerabilities in NuGet packages: 42 in the last 7 days and 135 in the last 90 days, 40 of them critical and 15 exploited in the wild. The most recent, Microsoft TestPlatform CLI privilege escalation in artifact postprocessor, was published on 11 November 2026. 46 vulnerabilities in the last four weeks, up 92% on the four before (24). 3 critical against 2. 172 packages have a page of their own. ## Counts - Last 7 days: 42 - Last 30 days: 48 - Last 90 days: 135 - All time: 1194 (40 critical, 15 exploited in the wild) ## About NuGet The package manager for the .NET ecosystem. ## Latest NuGet package vulnerabilities - [Microsoft TestPlatform CLI privilege escalation in artifact postprocessor](https://junglewise.ai/threats/microsoft-security-advisory-net-elevation-of-privilege-vulnerability-67735607) (medium, CVSS 6.5, published 11 Nov 2026) - [.NET Aspire information disclosure in log files](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-aspire-information-c1e21083) (high, CVSS 7.3, published 10 Nov 2026) - [.NET Aspire privilege escalation in temporary file handling](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-aspire-elevation-of-101ce3f2) (high, CVSS 7.3, published 10 Nov 2026) - [Microsoft Visual Studio heap buffer overflow RCE](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-visual-studio-remote-224be73b) (high, CVSS 8.8, published 10 Nov 2026) - [Microsoft Aspire Dashboard SDK missing authorization security feature bypass](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-aspire-security-feature-d0955c94) (critical, CVSS 9.1, published 10 Nov 2026) - [Microsoft Visual Studio heap-based buffer overflow](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-visual-studio-remote-6a4b9d28) (high, CVSS 8.8, published 10 Nov 2026) - [Microsoft ASP.NET Core race condition privilege escalation](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-asp-net-core-security-04275796) (high, CVSS 7.5, published 10 Nov 2026) - [Microsoft Visual Studio stack-based buffer overflow](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-visual-studio-remote-d956164d) (high, CVSS 8.8, published 10 Nov 2026) - [ASP.NET Core security feature bypass via input validation](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-asp-net-core-security-942d98c7) (medium, CVSS 6.5, published 10 Nov 2026) - [Microsoft Visual Studio deserialization remote code execution](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-visual-studio-remote-1eb2f932) (high, CVSS 8.8, published 10 Nov 2026) - [Microsoft ASP.NET Core denial of service via resource consumption](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-asp-net-core-denial-of-0f1476a7) (high, CVSS 7.5, published 10 Nov 2026) - [Microsoft Visual Studio heap-based buffer overflow](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-visual-studio-remote-ba83a5c9) (high, CVSS 8.8, published 10 Nov 2026) - [Microsoft ASP.NET Core SignalR memory leak denial of service](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-asp-net-core-denial-of-f6859a00) (high, CVSS 7.5, published 10 Nov 2026) - [ASP.NET Core inefficient algorithmic complexity denial of service](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-asp-net-core-denial-of-f3e14a11) (high, CVSS 7.5, published 10 Nov 2026) - [Microsoft .NET elevation of privilege in access control](https://junglewise.ai/threats/duplicate-advisory-microsoft-security-advisory-net-elevation-of-94435a8e) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-120796: Microsoft .NET algorithmic complexity denial of service](https://junglewise.ai/threats/cve-2026-120796-inefficient-algorithmic-complexity-in-net-allows-an-unauthorized) (medium, CVSS 5.3, published 10 Nov 2026) - [CVE-2026-120792: .NET Aspire sensitive information insertion in log file](https://junglewise.ai/threats/cve-2026-120792-insertion-of-sensitive-information-into-log-file-in-net-aspire) (high, CVSS 7.3, published 10 Nov 2026) - [CVE-2026-120778: .NET Aspire insecure temporary file creation local privilege escalation](https://junglewise.ai/threats/cve-2026-120778-creation-of-temporary-file-in-directory-with-insecure) (high, CVSS 7.3, published 10 Nov 2026) - [CVE-2026-120006: .NET Aspire insertion of sensitive information into sent data](https://junglewise.ai/threats/cve-2026-120006-insertion-of-sensitive-information-into-sent-data-in-net-aspire) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-118750: Microsoft ASP.NET Core denial of service via resource allocation](https://junglewise.ai/threats/cve-2026-118750-allocation-of-resources-without-limits-or-throttling-in-asp-net) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-118749: ASP.NET Core inefficient algorithmic complexity denial of service](https://junglewise.ai/threats/cve-2026-118749-inefficient-algorithmic-complexity-in-asp-net-core-allows-an) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-118748: Microsoft ASP.NET Core denial of service via resource exhaustion](https://junglewise.ai/threats/cve-2026-118748-allocation-of-resources-without-limits-or-throttling-in-asp-net) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-118747: .NET inefficient algorithmic complexity denial of service](https://junglewise.ai/threats/cve-2026-118747-inefficient-algorithmic-complexity-in-net-allows-an-unauthorized) (high, CVSS 7.5, published 10 Nov 2026) - [CVE-2026-118746: .NET framework insecure failure mode security bypass](https://junglewise.ai/threats/cve-2026-118746-not-failing-securely-failing-open-in-net-allows-an-unauthorized) (medium, CVSS 6.8, published 10 Nov 2026) - [CVE-2026-118745: Microsoft Visual Studio heap buffer overflow RCE](https://junglewise.ai/threats/cve-2026-118745-heap-based-buffer-overflow-in-visual-studio-allows-an) (high, CVSS 8.8, published 10 Nov 2026) ## Most severe NuGet package vulnerabilities - [CVE-2020-16017: Use after free in CefSharp](https://junglewise.ai/threats/cve-2020-16017-google-chrome-use-after-free-vulnerability) (critical, exploited in the wild, CVSS 9.6, published 27 Nov 2020) - [CVE-2020-16013: Inappropriate implementation in V8 in CefSharp](https://junglewise.ai/threats/cve-2020-16013-google-chromium-v8-incorrect-implementation-vulnerabililty) (critical, exploited in the wild, CVSS 8.8, published 27 Nov 2020) - [CVE-2023-4863: RUSTSEC-2023-0060 - libwebp: OOB write in BuildHuffmanTable](https://junglewise.ai/threats/cve-2023-4863-google-chromium-webp-heap-based-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 3.1, published 12 Sep 2023) - [CVE-2017-9822: DNN (aka DotNetNuke) has Remote Code Execution via a cookie](https://junglewise.ai/threats/cve-2017-9822-dotnetnuke-dnn-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 3.1, published 16 Oct 2018) - [CVE-2020-1147: .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2020-1147-microsoft-net-framework-sharepoint-and-visual-studio-remote-code) (critical, exploited in the wild, CVSS 3.1, published 24 May 2022) - [CVE-2021-23758: Remote Code Execution in AjaxNetProfessional](https://junglewise.ai/threats/cve-2021-23758-ajax-net-professional-unsafe-deserialization-of-untrusted-data) (critical, exploited in the wild, CVSS 3.1, published 7 Dec 2021) - [CVE-2020-16009: Inappropriate implementation in V8](https://junglewise.ai/threats/cve-2020-16009-google-chromium-v8-type-confusion-vulnerability) (critical, exploited in the wild, CVSS 3.1, published 2 Dec 2020) - [CVE-2020-15999: Heap buffer overflow in CefSharp](https://junglewise.ai/threats/cve-2020-15999-google-chrome-freetype-heap-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 3.1, published 27 Oct 2020) - [CVE-2022-0609: Use after free in Animation](https://junglewise.ai/threats/cve-2022-0609-google-chromium-animation-use-after-free-vulnerability) (critical, exploited in the wild, CVSS 3.1, published 22 Feb 2022) - [CVE-2023-38180: .NET Denial of Service Vulnerability](https://junglewise.ai/threats/cve-2023-38180-microsoft-net-core-and-visual-studio-denial-of-service) (critical, exploited in the wild, CVSS 3.1, published 9 Aug 2023) ## Vulnerabilities per week 46 vulnerabilities in the last four weeks, up 92% on the four before (24). 3 critical against 2. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 3 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 10 | 1 | 0 | | 14 Sep 2026 | 8 | 1 | 0 | | 21 Sep 2026 | 4 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 12 | 1 | 0 | | 12 Oct 2026 | 41 | 3 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 4 | 0 | 0 | | 2 Nov 2026 | 1 | 0 | 0 | | 9 Nov 2026 | 42 | 3 | 0 | ## NuGet packages - [Microsoft.ChakraCore (NuGet)](https://junglewise.ai/threats/technologies/microsoft-chakracore): 247 vulnerabilities - [Magick.NET-Q16-AnyCPU (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q16-anycpu): 167 vulnerabilities - [Magick.NET-Q16-HDRI-AnyCPU (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q16-hdri-anycpu): 162 vulnerabilities - [Magick.NET-Q8-AnyCPU (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q8-anycpu): 162 vulnerabilities - [Magick.NET-Q16-HDRI-x86 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q16-hdri-x86): 160 vulnerabilities - [Magick.NET-Q8-x86 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q8-x86): 160 vulnerabilities - [Magick.NET-Q16-x86 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q16-x86): 159 vulnerabilities - [Magick.NET-Q16-arm64 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q16-arm64): 157 vulnerabilities - [Magick.NET-Q16-HDRI-OpenMP-arm64 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q16-hdri-openmp-arm64): 157 vulnerabilities - [Magick.NET-Q16-HDRI-x64 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q16-hdri-x64): 157 vulnerabilities - [Magick.NET-Q16-OpenMP-arm64 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q16-openmp-arm64): 157 vulnerabilities - [Magick.NET-Q16-OpenMP-x64 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q16-openmp-x64): 157 vulnerabilities - [Magick.NET-Q8-arm64 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q8-arm64): 157 vulnerabilities - [Magick.NET-Q16-HDRI-arm64 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q16-hdri-arm64): 156 vulnerabilities - [Magick.NET-Q8-OpenMP-arm64 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q8-openmp-arm64): 156 vulnerabilities - [Magick.NET-Q8-OpenMP-x64 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q8-openmp-x64): 156 vulnerabilities - [Magick.NET-Q16-x64 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q16-x64): 153 vulnerabilities - [Magick.NET-Q8-x64 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q8-x64): 151 vulnerabilities - [Magick.NET-Q16-HDRI-OpenMP-x64 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q16-hdri-openmp-x64): 96 vulnerabilities - [Magick.NET-Q16-OpenMP-x86 (NuGet)](https://junglewise.ai/threats/technologies/magick-net-q16-openmp-x86): 67 vulnerabilities - [Microsoft.NetCore.App.Runtime.win-x86 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-win-x86): 56 vulnerabilities - [Microsoft.NetCore.App.Runtime.win-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-win-x64): 52 vulnerabilities - [Microsoft.NetCore.App.Runtime.win-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-win-arm64): 51 vulnerabilities - [Microsoft.AspNetCore.App.Runtime.win-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-win-x64): 48 vulnerabilities - [Microsoft.AspNetCore.App.Runtime.win-x86 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-win-x86): 47 vulnerabilities - [Microsoft.AspNetCore.App.Runtime.linux-arm (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-linux-arm): 46 vulnerabilities - [Microsoft.NetCore.App.Runtime.linux-arm (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-linux-arm): 46 vulnerabilities - [Microsoft.NetCore.App.Runtime.linux-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-linux-x64): 46 vulnerabilities - [Microsoft.AspNetCore.App.Runtime.win-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-win-arm64): 45 vulnerabilities - [Microsoft.NetCore.App.Runtime.linux-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-linux-arm64): 45 vulnerabilities - [Microsoft.NetCore.App.Runtime.linux-musl-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-linux-musl-arm64): 45 vulnerabilities - [Microsoft.NetCore.App.Runtime.linux-musl-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-linux-musl-x64): 45 vulnerabilities - [Microsoft.AspNetCore.App.Runtime.linux-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-linux-x64): 43 vulnerabilities - [Microsoft.NetCore.App.Runtime.linux-musl-arm (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-linux-musl-arm): 43 vulnerabilities - [Microsoft.AspNetCore.App.Runtime.linux-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-linux-arm64): 42 vulnerabilities - [Microsoft.AspNetCore.App.Runtime.linux-musl-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-linux-musl-x64): 42 vulnerabilities - [Microsoft.AspNetCore.App.Runtime.osx-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-osx-x64): 42 vulnerabilities - [Microsoft.NetCore.App.Runtime.osx-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-osx-x64): 42 vulnerabilities - [Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-linux-musl-arm64): 41 vulnerabilities - [Microsoft.NetCore.App.Runtime.osx-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-osx-arm64): 38 vulnerabilities - [Microsoft.AspNetCore.App.Runtime.linux-musl-arm (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-linux-musl-arm): 37 vulnerabilities - [DotNetNuke.Core (NuGet)](https://junglewise.ai/threats/technologies/dotnetnuke-core): 36 vulnerabilities - [Microsoft.AspNetCore.App.Runtime.osx-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-osx-arm64): 35 vulnerabilities - [Microsoft.NetCore.App.Runtime.win-arm (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-win-arm): 35 vulnerabilities - [Microsoft.AspNetCore.App.Runtime.win-arm (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app-runtime-win-arm): 30 vulnerabilities - [Umbraco.Cms (NuGet)](https://junglewise.ai/threats/technologies/umbraco-cms): 29 vulnerabilities - [Microsoft.WindowsDesktop.App.Runtime.win-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-windowsdesktop-app-runtime-win-x64): 25 vulnerabilities - [Microsoft.WindowsDesktop.App.Runtime.win-x86 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-windowsdesktop-app-runtime-win-x86): 24 vulnerabilities - [Microsoft.WindowsDesktop.App.Runtime.win-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-windowsdesktop-app-runtime-win-arm64): 23 vulnerabilities - [System.Security.Cryptography.Xml (NuGet)](https://junglewise.ai/threats/technologies/system-security-cryptography-xml): 16 vulnerabilities - [MessagePack (NuGet)](https://junglewise.ai/threats/technologies/messagepack): 15 vulnerabilities - [scriban (NuGet)](https://junglewise.ai/threats/technologies/scriban): 15 vulnerabilities - [Scriban.Signed (NuGet)](https://junglewise.ai/threats/technologies/scriban-signed): 14 vulnerabilities - [SixLabors.ImageSharp (NuGet)](https://junglewise.ai/threats/technologies/sixlabors-imagesharp): 14 vulnerabilities - [Microsoft.OpenApi.Kiota (NuGet)](https://junglewise.ai/threats/technologies/nuget-microsoft-openapi-kiota): 13 vulnerabilities - [Microsoft.OpenApi.Kiota.Builder (NuGet)](https://junglewise.ai/threats/technologies/nuget-microsoft-openapi-kiota-builder): 12 vulnerabilities - [OPCFoundation.NetStandard.Opc.Ua.Core (NuGet)](https://junglewise.ai/threats/technologies/opcfoundation-netstandard-opc-ua-core): 11 vulnerabilities - [Microsoft.AspNetCore.All (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-all): 10 vulnerabilities - [Microsoft.NETCore.App (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app): 10 vulnerabilities - [TinyMCE (NuGet)](https://junglewise.ai/threats/technologies/nuget-tinymce): 10 vulnerabilities - [CefSharp.Common (NuGet)](https://junglewise.ai/threats/technologies/cefsharp-common): 8 vulnerabilities - [CoreWCF.Primitives (NuGet)](https://junglewise.ai/threats/technologies/corewcf-primitives): 8 vulnerabilities - [jQuery.UI.Combined (NuGet)](https://junglewise.ai/threats/technologies/jquery-ui-combined): 8 vulnerabilities - [Microsoft.AspNetCore.App (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-app): 8 vulnerabilities - [OPCFoundation.NetStandard.Opc.Ua (NuGet)](https://junglewise.ai/threats/technologies/opcfoundation-netstandard-opc-ua): 8 vulnerabilities - [Piranha (NuGet)](https://junglewise.ai/threats/technologies/piranha): 8 vulnerabilities - [DotVVM (NuGet)](https://junglewise.ai/threats/technologies/dotvvm): 7 vulnerabilities - [Microsoft.Native.Quic.MsQuic.OpenSSL (NuGet)](https://junglewise.ai/threats/technologies/microsoft-native-quic-msquic-openssl): 7 vulnerabilities - [Microsoft.Native.Quic.MsQuic.Schannel (NuGet)](https://junglewise.ai/threats/technologies/microsoft-native-quic-msquic-schannel): 7 vulnerabilities - [UmbracoCms (NuGet)](https://junglewise.ai/threats/technologies/umbracocms): 7 vulnerabilities - [CefSharp.WinForms (NuGet)](https://junglewise.ai/threats/technologies/cefsharp-winforms): 6 vulnerabilities - [CefSharp.Wpf (NuGet)](https://junglewise.ai/threats/technologies/cefsharp-wpf): 6 vulnerabilities - [CefSharp.Wpf.HwndHost (NuGet)](https://junglewise.ai/threats/technologies/cefsharp-wpf-hwndhost): 6 vulnerabilities - [Dnn.Platform (NuGet)](https://junglewise.ai/threats/technologies/dnn-platform): 6 vulnerabilities - [Microsoft.AspNetCore.Mvc.Core (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-mvc-core): 6 vulnerabilities - [Microsoft.AspNetCore.Server.Kestrel.Core (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-server-kestrel-core): 6 vulnerabilities - [Microsoft.DiaSymReader.Native (NuGet)](https://junglewise.ai/threats/technologies/microsoft-diasymreader-native): 6 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.linux-arm (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-linux-arm): 6 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.linux-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-linux-arm64): 6 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-linux-musl-x64): 6 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.linux-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-linux-x64): 6 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-llvm-linux-arm64): 6 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-llvm-linux-x64): 6 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-llvm-osx-x64): 6 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.osx-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-osx-x64): 6 vulnerabilities - [Microsoft.AspNetCore.Mvc.Cors (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-mvc-cors): 5 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-llvm-aot-linux-arm64): 5 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-llvm-aot-linux-x64): 5 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-llvm-aot-osx-x64): 5 vulnerabilities - [Microsoft.NETCore.App.Runtime.rhel.6-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-rhel-6-x64): 5 vulnerabilities - [NuGet.CommandLine (NuGet)](https://junglewise.ai/threats/technologies/nuget-commandline): 5 vulnerabilities - [SSCMS (NuGet)](https://junglewise.ai/threats/technologies/nuget-sscms): 5 vulnerabilities - [System.Net.Http (NuGet)](https://junglewise.ai/threats/technologies/system-net-http): 5 vulnerabilities - [System.Text.Encodings.Web (NuGet)](https://junglewise.ai/threats/technologies/system-text-encodings-web): 5 vulnerabilities - [Umbraco.Forms (NuGet)](https://junglewise.ai/threats/technologies/umbraco-forms): 5 vulnerabilities - [UmbracoCms.Core (NuGet)](https://junglewise.ai/threats/technologies/umbracocms-core): 5 vulnerabilities - [AjaxNetProfessional (NuGet)](https://junglewise.ai/threats/technologies/ajaxnetprofessional): 4 vulnerabilities - [Aspire.Cli (NuGet)](https://junglewise.ai/threats/technologies/aspire-cli): 4 vulnerabilities - [BouncyCastle (NuGet)](https://junglewise.ai/threats/technologies/bouncycastle): 4 vulnerabilities - [Microsoft.AspNetCore.Mvc (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-mvc): 4 vulnerabilities - [Microsoft.AspNetCore.Mvc.Abstractions (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-mvc-abstractions): 4 vulnerabilities - [Microsoft.AspNetCore.Mvc.ApiExplorer (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-mvc-apiexplorer): 4 vulnerabilities - [Microsoft.AspNetCore.Mvc.DataAnnotations (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-mvc-dataannotations): 4 vulnerabilities - [Microsoft.AspNetCore.Mvc.Formatters.Json (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-mvc-formatters-json): 4 vulnerabilities - [Microsoft.AspNetCore.Mvc.Formatters.Xml (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-mvc-formatters-xml): 4 vulnerabilities - [Microsoft.AspNetCore.Mvc.Localization (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-mvc-localization): 4 vulnerabilities - [Microsoft.AspNetCore.Mvc.Razor (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-mvc-razor): 4 vulnerabilities - [Microsoft.AspNetCore.Mvc.Razor.Host (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-mvc-razor-host): 4 vulnerabilities - [Microsoft.AspNetCore.Mvc.TagHelpers (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-mvc-taghelpers): 4 vulnerabilities - [Microsoft.AspNetCore.Mvc.ViewFeatures (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-mvc-viewfeatures): 4 vulnerabilities - [Microsoft.AspNetCore.Mvc.WebApiCompatShim (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-mvc-webapicompatshim): 4 vulnerabilities - [Microsoft.AspNetCore.Server.HttpSys (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-server-httpsys): 4 vulnerabilities - [net.sf.mpxj (NuGet)](https://junglewise.ai/threats/technologies/net-sf-mpxj): 4 vulnerabilities - [net.sf.mpxj-for-csharp (NuGet)](https://junglewise.ai/threats/technologies/net-sf-mpxj-for-csharp): 4 vulnerabilities - [net.sf.mpxj-for-vb (NuGet)](https://junglewise.ai/threats/technologies/net-sf-mpxj-for-vb): 4 vulnerabilities - [NuGet.Commands (NuGet)](https://junglewise.ai/threats/technologies/nuget-commands): 4 vulnerabilities - [Steeltoe.Management.Endpoint (NuGet)](https://junglewise.ai/threats/technologies/nuget-steeltoe-management-endpoint): 4 vulnerabilities - [Serenity.Net.Core (NuGet)](https://junglewise.ai/threats/technologies/serenity-net-core): 4 vulnerabilities - [SharpZipLib (NuGet)](https://junglewise.ai/threats/technologies/sharpziplib): 4 vulnerabilities - [Snowflake.Data (NuGet)](https://junglewise.ai/threats/technologies/snowflake-data): 4 vulnerabilities - [System.Formats.Nrbf (NuGet)](https://junglewise.ai/threats/technologies/system-formats-nrbf): 4 vulnerabilities - [System.Net.Http.WinHttpHandler (NuGet)](https://junglewise.ai/threats/technologies/system-net-http-winhttphandler): 4 vulnerabilities - [System.Net.Security (NuGet)](https://junglewise.ai/threats/technologies/system-net-security): 4 vulnerabilities - [System.Net.WebSockets.Client (NuGet)](https://junglewise.ai/threats/technologies/system-net-websockets-client): 4 vulnerabilities - [Umbraco.Cms.Core (NuGet)](https://junglewise.ai/threats/technologies/umbraco-cms-core): 4 vulnerabilities - [Umbraco.Cms.Web.BackOffice (NuGet)](https://junglewise.ai/threats/technologies/umbraco-cms-web-backoffice): 4 vulnerabilities - [UmbracoForms (NuGet)](https://junglewise.ai/threats/technologies/umbracoforms): 4 vulnerabilities - [BouncyCastle.Cryptography (NuGet)](https://junglewise.ai/threats/technologies/bouncycastle-cryptography): 3 vulnerabilities - [CefSharp.Common.NETCore (NuGet)](https://junglewise.ai/threats/technologies/cefsharp-common-netcore): 3 vulnerabilities - [Microsoft.AspNetCore.Authentication.Negotiate (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-authentication-negotiate): 3 vulnerabilities - [Microsoft.AspNetCore.Http.Connections (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-http-connections): 3 vulnerabilities - [Microsoft.AspNetCore.Identity (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-identity): 3 vulnerabilities - [Microsoft.AspNetCore.SignalR.Protocols.MessagePack (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-signalr-protocols-messagepack): 3 vulnerabilities - [Microsoft.AspNetCore.SignalR.StackExchangeRedis (NuGet)](https://junglewise.ai/threats/technologies/microsoft-aspnetcore-signalr-stackexchangeredis): 3 vulnerabilities - [Microsoft.Build.Tasks.Core (NuGet)](https://junglewise.ai/threats/technologies/microsoft-build-tasks-core): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.browser-wasm (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-browser-wasm): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.android-arm (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-android-arm): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.android-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-android-arm64): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.android-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-android-x64): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.android-x86 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-android-x86): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.browser-wasm (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-browser-wasm): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.ios-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-ios-arm64): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-iossimulator-arm64): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-iossimulator-x64): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-maccatalyst-arm64): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-maccatalyst-x64): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.osx-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-osx-arm64): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-tvos-arm64): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-tvossimulator-arm64): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-tvossimulator-x64): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.win-x64 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-win-x64): 3 vulnerabilities - [Microsoft.NETCore.App.Runtime.Mono.win-x86 (NuGet)](https://junglewise.ai/threats/technologies/microsoft-netcore-app-runtime-mono-win-x86): 3 vulnerabilities - [MPXJ.Net (NuGet)](https://junglewise.ai/threats/technologies/mpxj-net): 3 vulnerabilities - [bootstrap (NuGet)](https://junglewise.ai/threats/technologies/nuget-bootstrap): 3 vulnerabilities - [bootstrap.sass (NuGet)](https://junglewise.ai/threats/technologies/nuget-bootstrap-sass): 3 vulnerabilities - [HtmlSanitizer (NuGet)](https://junglewise.ai/threats/technologies/nuget-htmlsanitizer): 3 vulnerabilities - [log4net (NuGet)](https://junglewise.ai/threats/technologies/nuget-log4net): 3 vulnerabilities - [SharpCompress (NuGet)](https://junglewise.ai/threats/technologies/nuget-sharpcompress): 3 vulnerabilities - [Steeltoe.Discovery.Eureka (NuGet)](https://junglewise.ai/threats/technologies/nuget-steeltoe-discovery-eureka): 3 vulnerabilities - [OPCFoundation.NetStandard.Opc.Ua.Server (NuGet)](https://junglewise.ai/threats/technologies/opcfoundation-netstandard-opc-ua-server): 3 vulnerabilities - [OpenTelemetry.Exporter.OpenTelemetryProtocol (NuGet)](https://junglewise.ai/threats/technologies/opentelemetry-exporter-opentelemetryprotocol): 3 vulnerabilities - [Oqtane.Framework (NuGet)](https://junglewise.ai/threats/technologies/oqtane-framework): 3 vulnerabilities - [Oqtane.Server (NuGet)](https://junglewise.ai/threats/technologies/oqtane-server): 3 vulnerabilities - [PeterO.Cbor (NuGet)](https://junglewise.ai/threats/technologies/petero-cbor): 3 vulnerabilities - [SIPSorcery (NuGet)](https://junglewise.ai/threats/technologies/sipsorcery): 3 vulnerabilities - [SSH.NET (NuGet)](https://junglewise.ai/threats/technologies/ssh-net): 3 vulnerabilities - [Sustainsys.Saml2 (NuGet)](https://junglewise.ai/threats/technologies/sustainsys-saml2): 3 vulnerabilities - [System.Private.Uri (NuGet)](https://junglewise.ai/threats/technologies/system-private-uri): 3 vulnerabilities - [System.Security.Cryptography.Pkcs (NuGet)](https://junglewise.ai/threats/technologies/system-security-cryptography-pkcs): 3 vulnerabilities - [System.Text.Json (NuGet)](https://junglewise.ai/threats/technologies/system-text-json): 3 vulnerabilities - [wix (NuGet)](https://junglewise.ai/threats/technologies/wix): 3 vulnerabilities - [YAFNET.Core (NuGet)](https://junglewise.ai/threats/technologies/yafnet-core): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "NuGet package vulnerabilities", https://junglewise.ai/threats/vendors/nuget, 13 November 2026.