Package · NuGet

NuGet.Protocol

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Low —

GHSA-g4vj-cjjj-v7hg

Defense in Depth update for NuGet Client

### Impact This update adds validation of the package ID and version during package download, in addition to the existing package signature validation. ### Patches #### NuGet The following NuGet.exe, NuGet.CommandLine, NuGet.Packaging, and NuGet.Protocol vers…

NuGet.CommandLine NuGet.Protocol NuGet.Packaging NuGet

Apr 14, 2026
High 7.1

CVE-2023-29337

NuGet Client Remote Code Execution Vulnerability

NuGet Client Remote Code Execution Vulnerability

Microsoft NuGet 6.0.4 NuGet 5.11.4 NuGet 6.4.1 Debian Ubuntu Alpine NuGet

Jun 14, 2023
High 7.8

CVE-2022-41032 Public exploit

NuGet Client Elevation of Privilege Vulnerability

NuGet Client Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.2 .NET 6.0 Ubuntu Alpine NuGet

Oct 11, 2022