Skip to main content
cve.nowby Sazabi
← NuGet
NuGetPackage

NuGet.Commands

4 known vulnerabilities (2 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 high, 1 medium
Registry
NuGet

Advisories 4

  • NuGet Client Remote Code Execution Vulnerability

    Affected: from 6.0.0, fixed in 6.0.5; from 6.2.0, fixed in 6.2.4; from 6.3.0, fixed in 6.3.3; from 6.4.0, fixed in 6.4.2; from 6.5.0, fixed in 6.5.1; from 6.6.0, fixed in 6.6.1; from 4.6.0, fixed in 5.11.5.

  • NuGet Client Elevation of Privilege Vulnerability

    Affected: from 4.6.0, fixed in 4.9.6; from 5.0.0, fixed in 5.7.3; from 5.8.0, fixed in 5.9.3; from 5.10.0, fixed in 5.11.3; from 6.0.0, fixed in 6.0.3; from 6.1.0, fixed in 6.2.2; from 6.3.0, fixed in 6.3.1.

  • CVE-2022-30184Medium 5.5

    .NET and Visual Studio Information Disclosure Vulnerability

    Affected: from 3.5.0, fixed in 4.9.5; from 5.0.0, fixed in 5.2.1; from 5.3.0, fixed in 5.7.2; from 5.8.0, fixed in 5.9.2; from 5.10.0, fixed in 5.11.2; from 6.0.0, fixed in 6.0.2; from 6.1.0, fixed in 6.2.1.

  • A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify…

    Affected: from 5.0.0, fixed in 5.0.2.