- Latest release
- 2.3.13 (Sep 8, 2026): no advisory affects it
- Newest unaffected release
- 2.3.13 (Sep 8, 2026), the latest release
- Advisories
- 4 · 1 critical, 1 high
- Releases
- 29 since 2.0.0 (Aug 11, 2017)
- Registry
- NuGet
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2025-55315Affects 0.0.1-alpha to 2.3.0 (2.3.6 is outside it)
- CVE-2021-1723Affects 0.0.1-alpha to 2.1.7 (2.1.25 is outside it)
- CVE-2019-0564Affects 2.1.0 to 2.1.3 (2.1.7 is outside it)
- CVE-2018-0787Affects 2.0.0 to 2.0.1 (2.0.2 is outside it)
Advisories 4
- CVE-2025-55315Critical 9.9
ASP.NET Security Feature Bypass Vulnerability
Affected: fixed in 2.3.6.
Fixed in 2.3.6 (released Oct 14, 2025, the day of disclosure).
The latest release, 2.3.13, is not affected.
- CVE-2021-1723High 7.5
ASP.NET Core and Visual Studio Denial of Service Vulnerability
Affected: fixed in 2.1.25.
Fixed in 2.1.25 (released Feb 9, 2021, 28 days after disclosure).
The latest release, 2.3.13, is not affected.
- CVE-2019-0564Unrated
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service…
Affected: from 2.1.0, fixed in 2.1.7.
Fixed in 2.1.7 (released Jan 8, 2019, the day of disclosure).
The latest release, 2.3.13, is not affected.
- CVE-2018-0787Unrated
ASP.NET Core 1.0.
Affected: from 2.0.0, fixed in 2.0.2.
Fixed in 2.0.2 (released Mar 13, 2018, 1 day before disclosure).
The latest release, 2.3.13, is not affected.