CVE-2019-0757

CVE-2019-0757 is a tampering vulnerability in the NuGet Package Manager affecting Linux and Mac systems, as well as products from Apple, Microsoft, Mono-project, and Red Hat. An authenticated attacker could exploit this with low complexity over the network to modify a NuGet package's folder structure, resulting in a high integrity impact but no confidentiality or availability impact, earning it a CVSS score of 6.5 (Medium). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it garnered some community discussion and media coverage at the time of its disclosure.