CVE Tools

Nuget

797 CVEs tracked since 2010. Since Feb 2020, 7 of them reached CISA KEV.

Nuget CVEs per month

Feb 2020 to Jul 2026. Point at a month, or focus the strip and use the arrow keys.
Nuget CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-0280
2020-03190
2020-04null or fewer
2020-05null or fewer
2020-06null or fewer
2020-07null or fewer
2020-08null or fewer
2020-0970
2020-10null or fewer
2020-1152
2020-1260
2021-0152
2021-0240
2021-03null or fewer
2021-04null or fewer
2021-0530
2021-06null or fewer
2021-0730
2021-0830
2021-0950
2021-1050
2021-1160
2021-1240
2022-0190
2022-02null or fewer
2022-0360
2022-0461
2022-05110
2022-0660
2022-0730
2022-0850
2022-0930
2022-10null or fewer
2022-1130
2022-1260
2023-0140
2023-02null or fewer
2023-03null or fewer
2023-0450
2023-05null or fewer
2023-06110
2023-07null or fewer
2023-0851
2023-0991
2023-10100
2023-1140
2023-12130
2024-01150
2024-0280
2024-03110
2024-0480
2024-05120
2024-0650
2024-07160
2024-0860
2024-09null or fewer
2024-10170
2024-11100
2024-1270
2025-01110
2025-0290
2025-0370
2025-0480
2025-0560
2025-0690
2025-0760
2025-0870
2025-0990
2025-10160
2025-11null or fewer
2025-12130
2026-01130
2026-02460
2026-03430
2026-04180
2026-0590
2026-06null or fewer
2026-07240

Products

The products that kept showing up in Nuget's monthly top three, with their CVEs summed over those months.

  1. Magick.net-q8-anycpu543 months
  2. Magick.net-q16-hdri-openmp-arm64453 months
  3. Magick.net-q16-openmp-x64452 months
  4. Magick.net-q8-openmp-arm64421 month
  5. Magick.net-q16-anycpu344 months
  6. Magick.net-q16-hdri-x86293 months
  7. Magick.net-q16-hdri-anycpu283 months
  8. Microsoft.chakracore244 months
  9. Magick.net-q16-hdri-x64232 months
  10. Dotnetnuke.core155 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Nuget.

  1. GHSA-cvhv-g4rq-3hmwImageMagick: Memory Leak when providing invalid options to the cli—
  2. GHSA-pfvm-w89x-94jwSIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)—
  3. GHSA-jwjp-4649-v8jpSIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing—
  4. GHSA-464c-974j-9xm6AWS CDK CodeBuild S3 Log Encryption Boolean Inversion—
  5. GHSA-p5rm-jg5c-8c77Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)—
  6. GHSA-76q6-2p6h-xjqrImageMagick: Heap Buffer Over-Write in X11 import with crafted window title—
  7. GHSA-h5r4-w88w-7ccrImageMagick: Memory Leak in TIFF encoder when invalid tiff:tile-geometry is specified—
  8. GHSA-h58x-r7f7-rh84ImageMagick: Memory Leak in ICON decoder when allocation fails—
  9. GHSA-m596-67p7-69whImageMagick: Memory leak in VIFF encoder when allocation fails—
  10. GHSA-r628-69v2-2f9cImageMagick: Memory Leak in MIFF encoder when allocaton fails—
  11. GHSA-h7f2-f9cc-h2gvImageMagick: Memory Leak in YUV decoder when opening of blob fails—
  12. GHSA-jfq9-q63x-rc63ImageMagick: Memory Leak in TIFF encoder when an allocation fails—
  13. GHSA-99w9-hv66-rfv7ImageMagick: Memory Leak in JNG encoder when a blob could not be opened—
  14. GHSA-j8rh-v2r8-v94xImageMagick: Memory Leak in hough lines operation when an operation fails—
  15. GHSA-7c7m-fpjw-gwcqImageMagick: Memory Leak in color transformation to log colorspace when operation fails—

The record

Peak rank
#17 in Feb 2026
Busiest month shown
Feb 2026, 46 CVEs
Months with a KEV entry
5 since Feb 2020
Monthly snapshots
93 since 2010
Nuget's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store