CVE-2019-0976

CVE-2019-0976 is a tampering vulnerability in the NuGet Package Manager affecting Linux and Mac operating systems. An authenticated attacker could exploit this flaw to modify the contents of the intermediate build folder, potentially leading to unauthorized alterations of project components. With a CVSS score of 5.5 (Medium), it requires local access and low privileges, but its impact is limited to integrity, with no confidentiality or availability compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it received limited media coverage and community discussion at the time of disclosure.