GCVE - cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:nuget:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Nuget (`e4507444-6ae6-537c-8908-a8709e98cd8f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/nuget`	purl2cpe	2026-06-01 10:17:06.075040
`pkg:deb/ubuntu/nuget`	purl2cpe	2026-06-01 10:17:06.075042
`pkg:github/nuget/home`	purl2cpe	2026-06-01 10:17:06.075043
`pkg:github/nuget/nugetgallery`	purl2cpe	2026-06-01 10:17:06.075045
`pkg:rpm/fedora/nuget`	purl2cpe	2026-06-01 10:17:06.075046
`pkg:rpm/opensuse/nuget`	purl2cpe	2026-06-01 10:17:06.075048
`pkg:sourceforge/nuget-gallery.mirror`	purl2cpe	2026-06-01 10:17:06.075049

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-0057`	vulnerable	2026-06-08 06:21:58.105326	NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability CRITICAL (9.1) NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability Published: 2024-01-09T17:56:59.552Z Updated: 2025-06-03T14:30:26.630Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29337`	vulnerable	2026-06-08 06:02:39.697771	NuGet Client Remote Code Execution Vulnerability HIGH (7.1) NuGet Client Remote Code Execution Vulnerability Published: 2023-06-14T14:52:20.370Z Updated: 2025-01-01T01:43:51.455Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29337	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41064`	vulnerable	2026-06-08 05:48:29.534527	.NET Framework Information Disclosure Vulnerability MEDIUM (5.8) .NET Framework Information Disclosure Vulnerability Published: 2022-11-09T00:00:00.000Z Updated: 2025-01-02T21:31:25.543Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41064	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30184`	vulnerable	2026-06-08 05:43:37.470864	.NET and Visual Studio Information Disclosure Vulnerability MEDIUM (5.5) .NET and Visual Studio Information Disclosure Vulnerability Published: 2022-06-15T21:52:20.000Z Updated: 2025-02-28T19:57:01.224Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30184	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-0976`	vulnerable	2026-06-08 05:12:21.233265	Details available A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify contents of the intermediate build folder (by default "obj"), aka 'NuGet Package Manager Tampering Vulnerability'. Published: 2019-05-16T18:24:57.000Z Updated: 2024-08-04T18:06:29.971Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/108210 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0976	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-0757`	vulnerable	2026-06-08 05:12:20.634232	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.