- Latest release
- 10.0.14 (Oct 25, 2026): no advisory affects it
- Newest unaffected release
- 10.0.14 (Oct 25, 2026), the latest release
- Advisories
- 1 · 1 high
- Releases
- 212 since 3.2.0
- Registry
- NuGet
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2026-102870Affects 10.0.0 to 10.0.13 (10.0.14 is outside it); 11.0.0-preview.1.26104.118 to 11.0.0-rc.2.26504.105 (11.0.0-rc.3.26522.148 is outside it)
Advisories 1
- CVE-2026-102870High 8.8
ASP.NET Core Remote Code Execution Vulnerability
Affected: from 10.0.0, fixed in 10.0.14; from 11.0.0-preview.1, fixed in 11.0.0-rc.3.26522.148.
Fixed in 10.0.14 (released Oct 25, 2026, 12 days after disclosure) and 11.0.0-rc.3.26522.148 (released Oct 25, 2026, 12 days after disclosure).
The latest release, 10.0.14, is not affected.