Package · NuGet

NuGet.CommandLine

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

Low —

GHSA-g4vj-cjjj-v7hg

Defense in Depth update for NuGet Client

### Impact This update adds validation of the package ID and version during package download, in addition to the existing package signature validation. ### Patches #### NuGet The following NuGet.exe, NuGet.CommandLine, NuGet.Packaging, and NuGet.Protocol vers…

NuGet.CommandLine NuGet.Protocol NuGet.Packaging NuGet

Apr 14, 2026
Critical 9.1

CVE-2024-0057

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Ubuntu Alpine NuGet

Jan 9, 2024
High 7.1

CVE-2023-29337

NuGet Client Remote Code Execution Vulnerability

NuGet Client Remote Code Execution Vulnerability

Microsoft NuGet 6.4.1 NuGet 6.3.2 NuGet 6.6.0 Debian Ubuntu Alpine NuGet

Jun 14, 2023
High 7.8

CVE-2022-41032 Public exploit

NuGet Client Elevation of Privilege Vulnerability

NuGet Client Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.2 .NET 6.0 Ubuntu Alpine NuGet

Oct 11, 2022
Medium 5.5

CVE-2022-30184

.NET and Visual Studio Information Disclosure Vulnerability

.NET and Visual Studio Information Disclosure Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.2 .NET 6.0 Alpine NuGet

Jun 15, 2022