Log in Start free

NuGet

Products

ProductCVEsExploitedLatest
NuGetGallery4–Apr 14, 2026

Exploited and recent CVEs

  • CVE-2026-39399 Critical 9.6 NuGet Gallery: Arbitrary Blob Overwrite via Nuspec Confusion and URI Fragment Truncation 0.5%
  • CVE-2024-54138 Medium 6.9 XSS Vulnerability in NuGetGallery's Markdown Autolinks Processing 0.4%
  • CVE-2024-47604 High 8.2 XSS vulnerability in NuGetGallery HTML attributes handling 0.8%
  • CVE-2024-37304 Medium 6.1 NuGetGallery's Markdown Autolinks Processing Vulnerable to Cross-site Scripting 0.7%