NuGet Vulnerability Scanner
The package manager for .NET. Essential for ASP.NET, Blazor, and cross-platform .NET development.
Scan your packages.lock.json online
Free dependency vulnerability scan for NuGet — no signup required
Common NuGet Risk Types
NuGet packages targeting .NET can be vulnerable to XML injection and deserialization attacks. GeekWala flags which .NET CVEs are on the CISA Known Exploited list.
NuGet Security Guide
How to Scan NuGet Projects
GeekWala supports the following C#/.NET dependency files
Supported Files
packages.lock.json
Scan Methods
- Upload your lockfile
- Paste file contents
- Import from GitHub
What You Get
- Exploitation-ranked results (not just CVSS)
- CISA KEV: flag CVEs actively attacked right now
- EPSS: 30-day exploit probability per CVE
- Cross-ecosystem: cover your full stack in one scan
See how results are ranked by exploitation risk — KEV-flagged CVEs first, with EPSS scores.
See a live example42 Known Exploited Vulnerabilities
These vulnerabilities are actively being exploited in the wild. Scan your project to check if you're affected.
Recent NuGet Vulnerabilities
Latest security issues affecting C#/.NET packages
Most Affected NuGet Packages
Packages with the most known vulnerabilities
Secure Your C#/.NET Dependencies
Scan your *.csproj against OSV. Results are ranked by exploitation probability — CVEs under active attack appear first, so you fix what's actually being exploited, not just what scores highest.