- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 24 · 2 critical, 16 high, 2 medium
- Registry
- NuGet
Advisories 24
- CVE-2026-88092Critical 9.4
ASP.NET Core Tampering Vulnerability
Affected: from 8.0.0, fixed in 8.0.32; from 10.0.0, fixed in 10.0.13; from 11.0.0-preview.1, fixed in 11.0.0-rc.2; from 9.0.0, fixed in 9.0.21.
- CVE-2026-56170High 7.5
ASP.NET Core Denial of Service Vulnerability
Affected: from 10.0.0, fixed in 10.0.6; from 9.0.0, fixed in 9.0.15; from 8.0.0, fixed in 8.0.26.
- CVE-2026-42899High 7.5
ASP.NET Core Denial of Service Vulnerability
Affected: from 8.0.0, fixed in 8.0.27; from 9.0.0, fixed in 9.0.16; from 10.0.0, fixed in 10.0.8.
- CVE-2026-26130High 7.5
ASP.NET Core Denial of Service Vulnerability
Affected: from 8.0.0, fixed in 8.0.25; from 9.0.0, fixed in 9.0.14; from 10.0.0, fixed in 10.0.4.
- CVE-2025-55315Critical 9.9
ASP.NET Security Feature Bypass Vulnerability
Affected: from 10.0.0-rc.1.25451.107, fixed in 10.0.0-rc.2.25502.107; from 9.0.0, fixed in 9.0.10; from 8.0.0, fixed in 8.0.21.
- CVE-2025-24070High 7.0
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
Affected: from 9.0.0, fixed in 9.0.3; from 8.0.0, fixed in 8.0.14; from 6.0.0, through 6.0.36.
- CVE-2024-38229High 8.1
.NET and Visual Studio Remote Code Execution Vulnerability
Affected: from 9.0.0-preview.1.24081.5, fixed in 9.0.0-rc.2.24474.3; from 8.0.0, fixed in 8.0.10.
- CVE-2024-35264High 8.1
.NET and Visual Studio Remote Code Execution Vulnerability
Affected: from 8.0.0, fixed in 8.0.7.
- CVE-2024-30046Medium 5.9
Visual Studio Denial of Service Vulnerability
Affected: from 7.0.0, fixed in 7.0.19; from 8.0.0, fixed in 8.0.5.
- CVE-2024-21386High 7.5
.NET Denial of Service Vulnerability
Affected: fixed in 6.0.27; from 7.0.0, fixed in 7.0.16; from 8.0.0, fixed in 8.0.2.
- CVE-2023-33170High 8.1
ASP.NET and Visual Studio Security Feature Bypass Vulnerability
Affected: fixed in 6.0.20; from 7.0.0, fixed in 7.0.9.
- CVE-2022-38013High 7.5
.NET Core and Visual Studio Denial of Service Vulnerability
Affected: from 3.1.0, fixed in 3.1.29; from 5.0.0, fixed in 6.0.9.
- CVE-2022-34716Medium 5.9
.NET Spoofing Vulnerability
Affected: from 3.1.0, fixed in 3.1.28; from 6.0.0, fixed in 6.0.8.
- CVE-2022-29145High 7.5
.NET and Visual Studio Denial of Service Vulnerability
Affected: from 3.0.0, fixed in 3.1.25; from 5.0.0, fixed in 5.0.17; from 6.0.0, fixed in 6.0.5.
- CVE-2022-29117High 7.5
.NET and Visual Studio Denial of Service Vulnerability
Affected: from 3.0.0, fixed in 3.1.25; from 5.0.0, fixed in 5.0.17; from 6.0.0, fixed in 6.0.5.
Show all 24 advisoriesShow fewer advisories
- CVE-2022-23267High 7.5
.NET and Visual Studio Denial of Service Vulnerability
Affected: from 3.0.0, fixed in 3.1.25; from 5.0.0, fixed in 5.0.17; from 6.0.0, fixed in 6.0.5.
- CVE-2022-24464High 7.5
.NET and Visual Studio Denial of Service Vulnerability
Affected: from 3.0.0, fixed in 3.1.23; from 5.0.0, fixed in 5.0.15; from 6.0.0, fixed in 6.0.3.
- CVE-2022-21986High 7.5
.NET Denial of Service Vulnerability
Affected: from 5.0.0, fixed in 5.0.14; from 6.0.0, fixed in 6.0.2.
- CVE-2021-1723High 7.5
ASP.NET Core and Visual Studio Denial of Service Vulnerability
Affected: from 3.1.0, fixed in 3.1.11; from 5.0.0, fixed in 5.0.2.
- CVE-2020-1045High 7.5
Microsoft ASP.NET Core Security Feature Bypass Vulnerability
Affected: from 3.1.0, fixed in 3.1.8.
- CVE-2020-1597Unrated
ASP.NET Core Denial of Service Vulnerability
Affected: from 3.1.0, fixed in 3.1.7.
- CVE-2020-1161Unrated
ASP.NET Core Denial of Service Vulnerability
Affected: from 3.1.0, fixed in 3.1.4.
- CVE-2020-0603Unrated
A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who…
Affected: from 3.1.0, fixed in 3.1.1.
- CVE-2020-0602Unrated
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service…
Affected: from 3.1.0, fixed in 3.1.1.