platform
NuGet: security advisories, deprecations and releases
NuGet, the .NET package registry.
Get NuGet alerts Free. No account. One email, and only when something touches your
stack.
- Items, 90 days
- 2
- Critical
- 0
- Last critical
- none
- This week
- 0
Security 2
- HIGH OpenSSF Blog · 17 Oct 2026
GitHub expands malware advisories to eight ecosystems via OpenSSF
GitHub integrated OpenSSF malicious-packages data into its Advisory Database, extending malware detection from npm to PyPI, Maven, RubyGems, NuGet, Go, crates.io, and PHP Composer.
- MEDIUM ACT BY 23 SEPT 2026 .NET Blog · 3 Oct 2026
Microsoft updates NuGet author-signing certificate Sept 2026
Microsoft will replace its NuGet signing certificate on 2026-09-23. Existing packages keep their signatures; new packages will use the new certificate. Policies that pin the old fingerprint will block installation.
Only hear about NuGet when it touches your stack
Tell Zero what you run. You get one email, and only on the days something above applies to you.