Microsoft.AspNetCore.App.Runtime.linux-musl-x64 (NuGet)

Advisories

Latest version

—

License

—

OpenSSF Scorecard

—

How to fix

Upgrading to 11.0.0-rc.2 or later clears every advisory below that has a fix.

Upgrade commands

dotnet

dotnet add package Microsoft.AspNetCore.App.Runtime.linux-musl-x64 --version 11.0.0-rc.2

Known vulnerabilities

Advisory	Severity	Affected	Fixed in
GHSA-f4g7-52wc-p8x7 Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability	High EPSS 1.09%	`>= 11.0.0-preview.1, < 11.0.0-rc.2`	`11.0.0-rc.2`
GHSA-f4g7-52wc-p8x7 Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability	High EPSS 1.09%	`>= 10.0.0, < 10.0.13`	`10.0.13`
GHSA-f4g7-52wc-p8x7 Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability	High EPSS 1.09%	`>= 9.0.0, < 9.0.21`	`9.0.21`
GHSA-f4g7-52wc-p8x7 Microsoft Security Advisory CVE-2026-96236 - ASP.NET Core Denial of Service Vulnerability	High EPSS 1.09%	`>= 8.0.0, < 8.0.32`	`8.0.32`
GHSA-rv87-ccxw-8ggf Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability	Critical EPSS 0.93%	`>= 11.0.0-preview.1, < 11.0.0-rc.2`	`11.0.0-rc.2`
GHSA-rv87-ccxw-8ggf Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability	Critical EPSS 0.93%	`>= 10.0.0, < 10.0.13`	`10.0.13`
GHSA-rv87-ccxw-8ggf Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability	Critical EPSS 0.93%	`>= 8.0.0, < 8.0.32`	`8.0.32`
GHSA-rv87-ccxw-8ggf Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability	Critical EPSS 0.93%	`>= 9.0.0, < 9.0.21`	`9.0.21`
GHSA-57xr-hfxx-jw5x Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability	Medium EPSS 0.91%	`>= 9.0.0, < 9.0.21`	`9.0.21`
GHSA-57xr-hfxx-jw5x Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability	Medium EPSS 0.91%	`>= 8.0.0, < 8.0.32`	`8.0.32`
GHSA-57xr-hfxx-jw5x Microsoft Security Advisory CVE-2026-70196 - ASP.NET Core Denial of Service Vulnerability	Medium EPSS 0.91%	`>= 10.0.0, < 10.0.13`	`10.0.13`
GHSA-fpq8-4vhr-rcxx Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability	Critical EPSS 0.94%	`>= 11.0.0-preview.1, < 11.0.0-rc.2`	`11.0.0-rc.2`
GHSA-fpq8-4vhr-rcxx Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability	Critical EPSS 0.94%	`>= 8.0.0, < 8.0.32`	`8.0.32`
GHSA-fpq8-4vhr-rcxx Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability	Critical EPSS 0.94%	`>= 10.0.0, < 10.0.13`	`10.0.13`
GHSA-fpq8-4vhr-rcxx Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability	Critical EPSS 0.94%	`>= 9.0.0, < 9.0.21`	`9.0.21`
GHSA-mf4x-w4gh-4656 Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability	High EPSS 0.96%	`>= 8.0.0, < 8.0.32`	`8.0.32`
GHSA-mf4x-w4gh-4656 Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability	High EPSS 0.96%	`>= 10.0.0, < 10.0.13`	`10.0.13`
GHSA-mf4x-w4gh-4656 Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability	High EPSS 0.96%	`>= 9.0.0, < 9.0.21`	`9.0.21`
GHSA-494h-xx7x-5frh Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability	High EPSS 0.53%	`>= 8.0.0, < 8.0.32`	`8.0.32`
GHSA-494h-xx7x-5frh Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability	High EPSS 0.53%	`>= 9.0.0, < 9.0.21`	`9.0.21`
GHSA-494h-xx7x-5frh Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability	High EPSS 0.53%	`>= 10.0.0, < 10.0.13`	`10.0.13`
GHSA-494h-xx7x-5frh Microsoft Security Advisory CVE-2026-70183 - ASP.NET Core Security Feature Bypass Vulnerability	High EPSS 0.53%	`>= 11.0.0-preview.1, < 11.0.0-rc.2`	`11.0.0-rc.2`
GHSA-w5qq-qrpp-rf4c Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability	High EPSS 1.23%	`>= 9.0.0, < 9.0.21`	`9.0.21`
GHSA-w5qq-qrpp-rf4c Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability	High EPSS 1.23%	`>= 10.0.0, < 10.0.13`	`10.0.13`
GHSA-w5qq-qrpp-rf4c Microsoft Security Advisory CVE-2026-70181 - ASP.NET Core Denial of Service Vulnerability	High EPSS 1.23%	`>= 8.0.0, < 8.0.32`	`8.0.32`
GHSA-x3vp-85cm-q97r Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability	High EPSS 0.73%	`>= 9.0.0, < 9.0.21`	`9.0.21`
GHSA-x3vp-85cm-q97r Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability	High EPSS 0.73%	`>= 10.0.0, < 10.0.13`	`10.0.13`
GHSA-x3vp-85cm-q97r Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability	High EPSS 0.73%	`>= 8.0.0, < 8.0.32`	`8.0.32`
GHSA-j8gr-8fp3-5q5h Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability	High EPSS 1.17%	`>= 8.0.0, < 8.0.26`	`8.0.26`
GHSA-j8gr-8fp3-5q5h Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability	High EPSS 1.17%	`>= 10.0.0, < 10.0.6`	`10.0.6`
GHSA-j8gr-8fp3-5q5h Microsoft Security Advisory CVE-2026-56170 – .NET Denial of Service Vulnerability	High EPSS 1.17%	`>= 9.0.0, < 9.0.15`	`9.0.15`
GHSA-9v76-4qcc-frgh Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability	High EPSS 2.43%	`>= 9.0.0, < 9.0.16`	`9.0.16`
GHSA-9v76-4qcc-frgh Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability	High EPSS 2.43%	`>= 8.0.0, < 8.0.27`	`8.0.27`
GHSA-9v76-4qcc-frgh Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability	High EPSS 2.43%	`>= 10.0.0, < 10.0.8`	`10.0.8`
GHSA-4vgm-c2wm-63mw .NET Denial of Service Vulnerability	High EPSS 2.99%	`>= 8.0.0, < 8.0.25`	`8.0.25`
GHSA-4vgm-c2wm-63mw .NET Denial of Service Vulnerability	High EPSS 2.99%	`>= 9.0.0, < 9.0.14`	`9.0.14`
GHSA-4vgm-c2wm-63mw .NET Denial of Service Vulnerability	High EPSS 2.99%	`>= 10.0.0, < 10.0.4`	`10.0.4`
GHSA-5rrx-jjjq-q2r5 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability	Critical EPSS 66.53%	`>= 8.0.0, < 8.0.21`	`8.0.21`
GHSA-5rrx-jjjq-q2r5 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability	Critical EPSS 66.53%	`>= 9.0.0, < 9.0.10`	`9.0.10`
GHSA-5rrx-jjjq-q2r5 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability	Critical EPSS 66.53%	`>= 10.0.0-rc.1.25451.107, < 10.0.0-rc.2.25502.107`	`10.0.0-rc.2.25502.107`
GHSA-2865-hh9g-w894 Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability	High EPSS 1.01%	`>= 6.0.0, <= 6.0.36`	No fix yet
GHSA-2865-hh9g-w894 Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability	High EPSS 1.01%	`>= 8.0.0, < 8.0.14`	`8.0.14`
GHSA-2865-hh9g-w894 Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability	High EPSS 1.01%	`>= 9.0.0, < 9.0.3`	`9.0.3`
GHSA-7vw9-cfwx-9gx9 Microsoft Security Advisory CVE-2024-38229 \| .NET Remote Code Execution Vulnerability	High EPSS 2.08%	`>= 8.0.0, < 8.0.10`	`8.0.10`
GHSA-7vw9-cfwx-9gx9 Microsoft Security Advisory CVE-2024-38229 \| .NET Remote Code Execution Vulnerability	High EPSS 2.08%	`>= 9.0.0-preview.1.24081.5, < 9.0.0-rc.2.24474.3`	`9.0.0-rc.2.24474.3`
GHSA-chfc-9w6m-75rf Microsoft Security Advisory CVE-2024-35264 \| .NET Remote Code Execution Vulnerability	High EPSS 2.56%	`>= 8.0.0, < 8.0.7`	`8.0.7`
GHSA-hhc7-x9w4-cw47 Microsoft Security Advisory CVE-2024-30046 \| .NET Denial of Service Vulnerability	Medium EPSS 1.69%	`>= 8.0.0, < 8.0.5`	`8.0.5`
GHSA-hhc7-x9w4-cw47 Microsoft Security Advisory CVE-2024-30046 \| .NET Denial of Service Vulnerability	Medium EPSS 1.69%	`>= 7.0.0, < 7.0.19`	`7.0.19`
GHSA-g74q-5xw3-j7q9 Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability	High EPSS 2.42%	`>= 8.0.0, < 8.0.2`	`8.0.2`
GHSA-g74q-5xw3-j7q9 Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability	High EPSS 2.42%	`< 6.0.27`	`6.0.27`
GHSA-g74q-5xw3-j7q9 Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability	High EPSS 2.42%	`>= 7.0.0, < 7.0.16`	`7.0.16`
GHSA-vh55-786g-wjwj .NET Information Disclosure Vulnerability	Medium EPSS 2.50%	`>= 3.1.0, < 3.1.28`	`3.1.28`
GHSA-vh55-786g-wjwj .NET Information Disclosure Vulnerability	Medium EPSS 2.50%	`>= 6.0.0, < 6.0.8`	`6.0.8`
GHSA-25c8-p796-jg6r Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability	High EPSS 1.99%	`< 6.0.20`	`6.0.20`
GHSA-25c8-p796-jg6r Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability	High EPSS 1.99%	`>= 7.0.0, < 7.0.9`	`7.0.9`
GHSA-485p-mrj5-8w2v .NET Denial of Service Vulnerability	High EPSS 5.70%	`>= 3.0.0, < 3.1.25`	`3.1.25`
GHSA-485p-mrj5-8w2v .NET Denial of Service Vulnerability	High EPSS 5.70%	`>= 5.0.0, < 5.0.17`	`5.0.17`
GHSA-485p-mrj5-8w2v .NET Denial of Service Vulnerability	High EPSS 5.70%	`>= 6.0.0, < 6.0.5`	`6.0.5`
GHSA-cw98-9j8w-wxv9 .NET Denial of Service Vulnerability	High EPSS 3.55%	`>= 3.0.0, < 3.1.23`	`3.1.23`
GHSA-cw98-9j8w-wxv9 .NET Denial of Service Vulnerability	High EPSS 3.55%	`>= 6.0.0, < 6.0.3`	`6.0.3`
GHSA-cw98-9j8w-wxv9 .NET Denial of Service Vulnerability	High EPSS 3.55%	`>= 5.0.0, < 5.0.15`	`5.0.15`
GHSA-x459-p2rx-f8ff .NET Denial of Service Vulnerability	High EPSS 3.74%	`>= 5.0.0, < 5.0.14`	`5.0.14`
GHSA-x459-p2rx-f8ff .NET Denial of Service Vulnerability	High EPSS 3.74%	`>= 6.0.0, < 6.0.2`	`6.0.2`
GHSA-r8m2-4x37-6592 .NET Denial of Service Vulnerability	High EPSS 4.04%	`>= 3.1.0, < 3.1.29`	`3.1.29`
GHSA-r8m2-4x37-6592 .NET Denial of Service Vulnerability	High EPSS 4.04%	`>= 5.0.0, < 6.0.9`	`6.0.9`
GHSA-fcg8-mg9g-6hc4 .NET Denial of Service Vulnerability	High EPSS 5.54%	`>= 6.0.0, < 6.0.5`	`6.0.5`
GHSA-fcg8-mg9g-6hc4 .NET Denial of Service Vulnerability	High EPSS 5.54%	`>= 3.0.0, < 3.1.25`	`3.1.25`
GHSA-fcg8-mg9g-6hc4 .NET Denial of Service Vulnerability	High EPSS 5.54%	`>= 5.0.0, < 5.0.17`	`5.0.17`
GHSA-3rq8-h3gj-r5c6 .NET Denial of Service Vulnerability	High EPSS 5.73%	`>= 5.0.0, < 5.0.17`	`5.0.17`
GHSA-3rq8-h3gj-r5c6 .NET Denial of Service Vulnerability	High EPSS 5.73%	`>= 6.0.0, < 6.0.5`	`6.0.5`
GHSA-3rq8-h3gj-r5c6 .NET Denial of Service Vulnerability	High EPSS 5.73%	`>= 3.0.0, < 3.1.25`	`3.1.25`
GHSA-2m65-m22p-9wjw Duplicate Advisory: .NET Information Disclosure Vulnerability Withdrawn	Medium	`>= 6.0.0, < 6.0.8`	`6.0.8`
GHSA-2m65-m22p-9wjw Duplicate Advisory: .NET Information Disclosure Vulnerability Withdrawn	Medium	`>= 3.1.0, < 3.1.28`	`3.1.28`
GHSA-242j-2gm6-5rwx ASP.NET Core and Visual Studio Denial of Service Vulnerability	High EPSS 5.30%	`>= 3.1.0, < 3.1.11`	`3.1.11`
GHSA-242j-2gm6-5rwx ASP.NET Core and Visual Studio Denial of Service Vulnerability	High EPSS 5.30%	`>= 5.0.0, < 5.0.2`	`5.0.2`
GHSA-hxrm-9w7p-39cc Cookie parsing failure	High EPSS 5.93%	`>= 3.1.0, < 3.1.8`	`3.1.8`
GHSA-f8qx-mjcq-wfgx ASP.NET Core Denial of Service Vulnerability	High EPSS 6.56%	`>= 3.1.0, < 3.1.7`	`3.1.7`
GHSA-3cf7-7wq6-8842 ASP.NET Core Denial of Service Vulnerability	High EPSS 5.31%	`>= 3.1.0, < 3.1.4`	`3.1.4`
GHSA-23cv-jh4v-vffm Denial of service in ASP.NET Core	Medium EPSS 7.61%	`>= 3.1.0, < 3.1.1`	`3.1.1`
GHSA-655q-9gvg-q4cm Remote code execution in ASP.NET Core	High EPSS 21.17%	`>= 3.1.0, < 3.1.1`	`3.1.1`

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor