NuGet

Product

NuGet is the package manager for .NET, used to create, publish and consume reusable code packages, including their transitive dependencies.

Title graphic: NuGet (Product)

Type	Product
Documentation	learn.microsoft.com/en-us/nuget

Key points about NuGet

A fully patched .NET 8 or .NET 9 app can be compromised through a poisoned NuGet package or an old base container layer. · Fix OWASP Architectural Risks in .NET…

Episodes about NuGet

Fix OWASP Architectural Risks in .NET Applications

2025-11-23 · Video on YouTube

This episode dives straight into the myth that upgrading to the latest .NET framework somehow makes your application safe, and it dismantles that belief fast. With the OWASP update reshaping how risks are ranked and understood, this conversation exposes why…

Articles about NuGet (2)

Securing the .NET Supply Chain: Best Practices for Managing NuGet Dependencies
2026-08-12 · Mirko Peters
Welcome back to the podcast and our ongoing exploration of enterprise software security. In this deep-dive companion blog post, we are expanding on a topic that has…
Automating License Optimization and Audits in Microsoft 365
2026-08-12 · Mirko Peters
Welcome back to the podcast blog! If you have ever stared at your monthly Microsoft 365 software bill and wondered why you are paying for seats that nobody has touc…

Frequently asked questions

Does upgrading to .NET 9 make an app secure?

No. The episode shows a fully patched .NET 8 or 9 app can still be compromised through a poisoned NuGet package or a base container layer nobody noticed. · From the episode: Fix OWASP Architectural Risks in .NET…

What are supply chain risks in .NET?

Dependencies such as NuGet packages and container base layers can carry vulnerabilities into production unseen. The episode uses a poisoned package as an example. · From the episode: Fix OWASP Architectural Risks in .NET…

Glossary

Community wiki

Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.

Experts and companies for this topic

Nobody has listed this topic yet. Add it to your profile.

Sources

Documentation: learn.microsoft.com/en-us/nuget
Feed for this topic (RSS): entity/nuget/feed.xml
M365.FM episodes on this topic: 1
Articles on this topic: 2

Maintained by Mirko Peters (Microsoft MVP) · Last updated: 2026-11-03