Microsoft.AspNetCore.App.Runtime.linux-musl-arm (NuGet)
Advisories
71
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 11.0.0-rc.2 or later clears every advisory below that has a fix.
Upgrade commands
dotnet
dotnet add package Microsoft.AspNetCore.App.Runtime.linux-musl-arm --version 11.0.0-rc.2Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-f4g7-52wc-p8x7 Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability |
High EPSS 1.09% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-f4g7-52wc-p8x7 Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability |
High EPSS 1.09% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-f4g7-52wc-p8x7 Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability |
High EPSS 1.09% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-f4g7-52wc-p8x7 Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability |
High EPSS 1.09% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-rv87-ccxw-8ggf Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability |
Critical EPSS 0.93% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-rv87-ccxw-8ggf Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability |
Critical EPSS 0.93% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-rv87-ccxw-8ggf Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability |
Critical EPSS 0.93% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-rv87-ccxw-8ggf Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability |
Critical EPSS 0.93% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-57xr-hfxx-jw5x Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability |
Medium EPSS 0.91% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-57xr-hfxx-jw5x Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability |
Medium EPSS 0.91% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-57xr-hfxx-jw5x Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability |
Medium EPSS 0.91% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-fpq8-4vhr-rcxx Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability |
Critical EPSS 0.94% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-fpq8-4vhr-rcxx Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability |
Critical EPSS 0.94% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-fpq8-4vhr-rcxx Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability |
Critical EPSS 0.94% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-fpq8-4vhr-rcxx Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability |
Critical EPSS 0.94% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-mf4x-w4gh-4656 Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability |
High EPSS 0.96% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-mf4x-w4gh-4656 Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability |
High EPSS 0.96% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-mf4x-w4gh-4656 Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability |
High EPSS 0.96% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-494h-xx7x-5frh Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability |
High EPSS 0.53% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-494h-xx7x-5frh Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability |
High EPSS 0.53% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-494h-xx7x-5frh Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability |
High EPSS 0.53% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-494h-xx7x-5frh Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability |
High EPSS 0.53% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-w5qq-qrpp-rf4c Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability |
High EPSS 1.23% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-w5qq-qrpp-rf4c Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability |
High EPSS 1.23% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-w5qq-qrpp-rf4c Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability |
High EPSS 1.23% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-x3vp-85cm-q97r Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability |
High EPSS 0.73% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-x3vp-85cm-q97r Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability |
High EPSS 0.73% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-x3vp-85cm-q97r Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability |
High EPSS 0.73% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-j8gr-8fp3-5q5h Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 8.0.0, < 8.0.26 | 8.0.26 |
| GHSA-j8gr-8fp3-5q5h Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 10.0.0, < 10.0.6 | 10.0.6 |
| GHSA-j8gr-8fp3-5q5h Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 9.0.0, < 9.0.15 | 9.0.15 |
| GHSA-9v76-4qcc-frgh Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability |
High EPSS 2.43% |
>= 9.0.0, < 9.0.16 | 9.0.16 |
| GHSA-9v76-4qcc-frgh Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability |
High EPSS 2.43% |
>= 8.0.0, < 8.0.27 | 8.0.27 |
| GHSA-9v76-4qcc-frgh Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability |
High EPSS 2.43% |
>= 10.0.0, < 10.0.8 | 10.0.8 |
| GHSA-4vgm-c2wm-63mw .NET Denial of Service Vulnerability |
High EPSS 2.99% |
>= 9.0.0, < 9.0.14 | 9.0.14 |
| GHSA-4vgm-c2wm-63mw .NET Denial of Service Vulnerability |
High EPSS 2.99% |
>= 10.0.0, < 10.0.4 | 10.0.4 |
| GHSA-4vgm-c2wm-63mw .NET Denial of Service Vulnerability |
High EPSS 2.99% |
>= 8.0.0, < 8.0.25 | 8.0.25 |
| GHSA-5rrx-jjjq-q2r5 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability |
Critical EPSS 66.53% |
>= 9.0.0, < 9.0.10 | 9.0.10 |
| GHSA-5rrx-jjjq-q2r5 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability |
Critical EPSS 66.53% |
>= 10.0.0-rc.1.25451.107, < 10.0.0-rc.2.25502.107 | 10.0.0-rc.2.25502.107 |
| GHSA-5rrx-jjjq-q2r5 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability |
Critical EPSS 66.53% |
>= 8.0.0, < 8.0.21 | 8.0.21 |
| GHSA-2865-hh9g-w894 Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability |
High EPSS 1.01% |
>= 8.0.0, < 8.0.14 | 8.0.14 |
| GHSA-2865-hh9g-w894 Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability |
High EPSS 1.01% |
>= 6.0.0, <= 6.0.36 | No fix yet |
| GHSA-2865-hh9g-w894 Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability |
High EPSS 1.01% |
>= 9.0.0, < 9.0.3 | 9.0.3 |
| GHSA-7vw9-cfwx-9gx9 Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability |
High EPSS 2.08% |
>= 9.0.0-preview.1.24081.5, < 9.0.0-rc.2.24474.3 | 9.0.0-rc.2.24474.3 |
| GHSA-7vw9-cfwx-9gx9 Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability |
High EPSS 2.08% |
>= 8.0.0, < 8.0.10 | 8.0.10 |
| GHSA-chfc-9w6m-75rf Microsoft Security Advisory CVE-2024-35264 | .NET Remote Code Execution Vulnerability |
High EPSS 2.56% |
>= 8.0.0, < 8.0.7 | 8.0.7 |
| GHSA-hhc7-x9w4-cw47 Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability |
Medium EPSS 1.69% |
>= 7.0.0, < 7.0.19 | 7.0.19 |
| GHSA-hhc7-x9w4-cw47 Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability |
Medium EPSS 1.69% |
>= 8.0.0, < 8.0.5 | 8.0.5 |
| GHSA-g74q-5xw3-j7q9 Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability |
High EPSS 2.42% |
>= 7.0.0, < 7.0.16 | 7.0.16 |
| GHSA-g74q-5xw3-j7q9 Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability |
High EPSS 2.42% |
>= 8.0.0, < 8.0.2 | 8.0.2 |
| GHSA-g74q-5xw3-j7q9 Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability |
High EPSS 2.42% |
< 6.0.27 | 6.0.27 |
| GHSA-vh55-786g-wjwj .NET Information Disclosure Vulnerability |
Medium EPSS 2.50% |
>= 3.1.0, < 3.1.28 | 3.1.28 |
| GHSA-vh55-786g-wjwj .NET Information Disclosure Vulnerability |
Medium EPSS 2.50% |
>= 6.0.0, < 6.0.8 | 6.0.8 |
| GHSA-25c8-p796-jg6r Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability |
High EPSS 1.99% |
< 6.0.20 | 6.0.20 |
| GHSA-25c8-p796-jg6r Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability |
High EPSS 1.99% |
>= 7.0.0, < 7.0.9 | 7.0.9 |
| GHSA-485p-mrj5-8w2v .NET Denial of Service Vulnerability |
High EPSS 5.70% |
>= 5.0.1, < 5.0.17 | 5.0.17 |
| GHSA-485p-mrj5-8w2v .NET Denial of Service Vulnerability |
High EPSS 5.70% |
>= 6.0.0, < 6.0.5 | 6.0.5 |
| GHSA-cw98-9j8w-wxv9 .NET Denial of Service Vulnerability |
High EPSS 3.55% |
>= 5.0.0, < 5.0.15 | 5.0.15 |
| GHSA-cw98-9j8w-wxv9 .NET Denial of Service Vulnerability |
High EPSS 3.55% |
>= 6.0.0, < 6.0.3 | 6.0.3 |
| GHSA-x459-p2rx-f8ff .NET Denial of Service Vulnerability |
High EPSS 3.74% |
>= 5.0.0, < 5.0.14 | 5.0.14 |
| GHSA-x459-p2rx-f8ff .NET Denial of Service Vulnerability |
High EPSS 3.74% |
>= 6.0.0, < 6.0.2 | 6.0.2 |
| GHSA-r8m2-4x37-6592 .NET Denial of Service Vulnerability |
High EPSS 4.04% |
>= 5.0.0, < 6.0.9 | 6.0.9 |
| GHSA-fcg8-mg9g-6hc4 .NET Denial of Service Vulnerability |
High EPSS 5.54% |
>= 6.0.0, < 6.0.5 | 6.0.5 |
| GHSA-fcg8-mg9g-6hc4 .NET Denial of Service Vulnerability |
High EPSS 5.54% |
>= 3.0.0, < 3.1.25 | 3.1.25 |
| GHSA-fcg8-mg9g-6hc4 .NET Denial of Service Vulnerability |
High EPSS 5.54% |
>= 5.0.0, < 5.0.17 | 5.0.17 |
| GHSA-3rq8-h3gj-r5c6 .NET Denial of Service Vulnerability |
High EPSS 5.73% |
>= 3.0.0, < 3.1.25 | 3.1.25 |
| GHSA-3rq8-h3gj-r5c6 .NET Denial of Service Vulnerability |
High EPSS 5.73% |
>= 6.0.0, < 6.0.5 | 6.0.5 |
| GHSA-3rq8-h3gj-r5c6 .NET Denial of Service Vulnerability |
High EPSS 5.73% |
>= 5.0.0, < 5.0.17 | 5.0.17 |
| GHSA-2m65-m22p-9wjw Duplicate Advisory: .NET Information Disclosure Vulnerability Withdrawn |
Medium | >= 3.1.0, < 3.1.28 | 3.1.28 |
| GHSA-2m65-m22p-9wjw Duplicate Advisory: .NET Information Disclosure Vulnerability Withdrawn |
Medium | >= 6.0.0, < 6.0.8 | 6.0.8 |
| GHSA-242j-2gm6-5rwx ASP.NET Core and Visual Studio Denial of Service Vulnerability |
High EPSS 5.30% |
>= 5.0.1, < 5.0.2 | 5.0.2 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor