Microsoft.NetCore.App.Runtime.linux-musl-arm64 (NuGet)

Advisories

Latest version

—

License

—

OpenSSF Scorecard

—

How to fix

Upgrading to 11.0.0-rc.2 or later clears every advisory below that has a fix.

Upgrade commands

dotnet

dotnet add package Microsoft.NetCore.App.Runtime.linux-musl-arm64 --version 11.0.0-rc.2

Known vulnerabilities

Advisory	Severity	Affected	Fixed in
GHSA-87vj-4hqv-22p9 Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability	High EPSS 0.99%	`>= 9.0.0, < 9.0.21`	`9.0.21`
GHSA-87vj-4hqv-22p9 Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability	High EPSS 0.99%	`>= 11.0.0-preview.1, < 11.0.0-rc.2`	`11.0.0-rc.2`
GHSA-87vj-4hqv-22p9 Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability	High EPSS 0.99%	`>= 10.0.0, < 10.0.13`	`10.0.13`
GHSA-87vj-4hqv-22p9 Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability	High EPSS 0.99%	`>= 8.0.0, < 8.0.32`	`8.0.32`
GHSA-2j93-m82w-73j2 Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability	High EPSS 0.41%	`>= 8.0.0, < 8.0.32`	`8.0.32`
GHSA-2j93-m82w-73j2 Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability	High EPSS 0.41%	`>= 11.0.0-preview.1, < 11.0.0-rc.2`	`11.0.0-rc.2`
GHSA-2j93-m82w-73j2 Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability	High EPSS 0.41%	`>= 9.0.0, < 9.0.21`	`9.0.21`
GHSA-2j93-m82w-73j2 Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability	High EPSS 0.41%	`>= 10.0.0, < 10.0.13`	`10.0.13`
GHSA-w6wh-p4g7-mpj2 Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability	High EPSS 0.41%	`>= 10.0.0, < 10.0.13`	`10.0.13`
GHSA-w6wh-p4g7-mpj2 Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability	High EPSS 0.41%	`>= 8.0.0, < 8.0.32`	`8.0.32`
GHSA-w6wh-p4g7-mpj2 Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability	High EPSS 0.41%	`>= 9.0.0, < 9.0.21`	`9.0.21`
GHSA-w6wh-p4g7-mpj2 Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability	High EPSS 0.41%	`>= 11.0.0-preview.1, < 11.0.0-rc.2`	`11.0.0-rc.2`
GHSA-fqpq-cx42-9jmm Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability	Medium EPSS 0.49%	`>= 11.0.0-preview.1, < 11.0.0-rc.2`	`11.0.0-rc.2`
GHSA-3rxq-g8rj-r2cf Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability	High EPSS 1.25%	`>= 8.0.0, < 8.0.32`	`8.0.32`
GHSA-3rxq-g8rj-r2cf Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability	High EPSS 1.25%	`>= 10.0.0, < 10.0.13`	`10.0.13`
GHSA-3rxq-g8rj-r2cf Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability	High EPSS 1.25%	`>= 11.0.0-preview.1, < 11.0.0-rc.2`	`11.0.0-rc.2`
GHSA-3rxq-g8rj-r2cf Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability	High EPSS 1.25%	`>= 9.0.0, < 9.0.21`	`9.0.21`
GHSA-wxxw-5cvc-53j7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability	Medium EPSS 0.78%	`>= 8.0.0, < 8.0.32`	`8.0.32`
GHSA-wxxw-5cvc-53j7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability	Medium EPSS 0.78%	`>= 10.0.0, < 10.0.13`	`10.0.13`
GHSA-wxxw-5cvc-53j7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability	Medium EPSS 0.78%	`>= 9.0.0, < 9.0.21`	`9.0.21`
GHSA-wxxw-5cvc-53j7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability	Medium EPSS 0.78%	`>= 11.0.0-preview.1, < 11.0.0-rc.2`	`11.0.0-rc.2`
GHSA-mc4q-93x5-f6hj Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability	High EPSS 1.25%	`>= 8.0.0, < 8.0.32`	`8.0.32`
GHSA-mc4q-93x5-f6hj Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability	High EPSS 1.25%	`>= 11.0.0-preview.1, < 11.0.0-rc.2`	`11.0.0-rc.2`
GHSA-mc4q-93x5-f6hj Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability	High EPSS 1.25%	`>= 9.0.0, < 9.0.21`	`9.0.21`
GHSA-mc4q-93x5-f6hj Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability	High EPSS 1.25%	`>= 10.0.0, < 10.0.13`	`10.0.13`
GHSA-9mr8-pwpw-3j2w Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability	High EPSS 0.34%	`>= 10.0.0, < 10.0.11`	`10.0.11`
GHSA-9mr8-pwpw-3j2w Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability	High EPSS 0.34%	`>= 8.0.0, < 8.0.30`	`8.0.30`
GHSA-9mr8-pwpw-3j2w Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability	High EPSS 0.34%	`>= 9.0.0, < 9.0.19`	`9.0.19`
GHSA-m93f-wj8c-rp8p Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability	High EPSS 1.23%	`>= 9.0.0, < 9.0.19`	`9.0.19`
GHSA-m93f-wj8c-rp8p Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability	High EPSS 1.23%	`>= 8.0.0, < 8.0.30`	`8.0.30`
GHSA-m93f-wj8c-rp8p Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability	High EPSS 1.23%	`>= 10.0.0, < 10.0.11`	`10.0.11`
GHSA-r6mh-95jw-g7qg Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability	Medium EPSS 0.75%	`>= 10.0.0, < 10.0.11`	`10.0.11`
GHSA-r6mh-95jw-g7qg Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability	Medium EPSS 0.75%	`>= 9.0.0, < 9.0.19`	`9.0.19`
GHSA-r6mh-95jw-g7qg Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability	Medium EPSS 0.75%	`>= 8.0.0, < 8.0.30`	`8.0.30`
GHSA-74jp-vm22-8q8x Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability	Medium EPSS 0.74%	`>= 9.0.0, < 9.0.18`	`9.0.18`
GHSA-74jp-vm22-8q8x Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability	Medium EPSS 0.74%	`>= 10.0.0, < 10.0.10`	`10.0.10`
GHSA-74jp-vm22-8q8x Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability	Medium EPSS 0.74%	`>= 8.0.0, < 8.0.29`	`8.0.29`
GHSA-wp74-jgxh-gv4q Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability	High EPSS 1.17%	`>= 10.0.0, < 10.0.10`	`10.0.10`
GHSA-wp74-jgxh-gv4q Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability	High EPSS 1.17%	`>= 8.0.0, < 8.0.29`	`8.0.29`
GHSA-wp74-jgxh-gv4q Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability	High EPSS 1.17%	`>= 9.0.0, < 9.0.18`	`9.0.18`
GHSA-qvw7-jm5c-6hqw Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability	High EPSS 0.61%	`>= 8.0.0, < 8.0.29`	`8.0.29`
GHSA-qvw7-jm5c-6hqw Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability	High EPSS 0.61%	`>= 10.0.0, < 10.0.10`	`10.0.10`
GHSA-qvw7-jm5c-6hqw Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability	High EPSS 0.61%	`>= 9.0.0, < 9.0.18`	`9.0.18`
GHSA-w7cw-xp7h-6j5j Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability	High EPSS 1.23%	`>= 10.0.0, < 10.0.10`	`10.0.10`
GHSA-w7cw-xp7h-6j5j Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability	High EPSS 1.23%	`>= 9.0.0, < 9.0.18`	`9.0.18`
GHSA-w7cw-xp7h-6j5j Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability	High EPSS 1.23%	`>= 8.0.0, < 8.0.29`	`8.0.29`
GHSA-cvvh-rhrc-wg4q Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability	High EPSS 1.17%	`>= 8.0.0, < 8.0.29`	`8.0.29`
GHSA-cvvh-rhrc-wg4q Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability	High EPSS 1.17%	`>= 10.0.0, < 10.0.10`	`10.0.10`
GHSA-cvvh-rhrc-wg4q Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability	High EPSS 1.17%	`>= 9.0.0, < 9.0.18`	`9.0.18`
GHSA-rp2p-6cmp-jxj9 Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability	High EPSS 1.17%	`>= 9.0.0, < 9.0.18`	`9.0.18`
GHSA-rp2p-6cmp-jxj9 Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability	High EPSS 1.17%	`>= 10.0.0, < 10.0.10`	`10.0.10`
GHSA-rp2p-6cmp-jxj9 Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability	High EPSS 1.17%	`>= 8.0.0, < 8.0.29`	`8.0.29`
GHSA-vmwf-m9c5-3jvc Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability	High EPSS 2.28%	`>= 10.0.0, < 10.0.6`	`10.0.6`
GHSA-vmwf-m9c5-3jvc Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability	High EPSS 2.28%	`>= 8.0.0, < 8.0.26`	`8.0.26`
GHSA-vmwf-m9c5-3jvc Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability	High EPSS 2.28%	`>= 9.0.0, < 9.0.15`	`9.0.15`
GHSA-387c-qmrw-59qv Duplicate Advisory: Microsoft Security Advisory CVE-2026-26131 – .NET Elevation of Privilege Vulnerability Withdrawn	High	`>= 10.0.0, < 10.0.4`	`10.0.4`
GHSA-crjq-wm6x-6qx7 .NET Elevation of Privilege Vulnerability	High EPSS 0.37%	`>= 10.0.0, < 10.0.4`	`10.0.4`
GHSA-73j8-2gch-69rq .NET Denial of Service Vulnerability	High EPSS 2.13%	`>= 9.0.0, < 9.0.14`	`9.0.14`
GHSA-73j8-2gch-69rq .NET Denial of Service Vulnerability	High EPSS 2.13%	`>= 10.0.0, < 10.0.4`	`10.0.4`
GHSA-gwq6-fmvp-qp68 Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability	Medium EPSS 0.72%	`>= 9.0.0, < 9.0.10`	`9.0.10`
GHSA-gwq6-fmvp-qp68 Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability	Medium EPSS 0.72%	`>= 8.0.0, < 8.0.21`	`8.0.21`
GHSA-266m-wp2v-x7mq Microsoft Security Advisory CVE-2025-30399 \| .NET Remote Code Vulnerability	High EPSS 1.07%	`>= 8.0.0, < 8.0.17`	`8.0.17`
GHSA-266m-wp2v-x7mq Microsoft Security Advisory CVE-2025-30399 \| .NET Remote Code Vulnerability	High EPSS 1.07%	`>= 9.0.0, < 9.0.6`	`9.0.6`
GHSA-gjf6-3w4p-7xfh Microsoft Security Advisory CVE-2025-21176 \| .NET and Visual Studio Remote Code Execution Vulnerability	High EPSS 2.38%	`>= 9.0.0, < 9.0.1`	`9.0.1`
GHSA-gjf6-3w4p-7xfh Microsoft Security Advisory CVE-2025-21176 \| .NET and Visual Studio Remote Code Execution Vulnerability	High EPSS 2.38%	`>= 8.0.0, < 8.0.12`	`8.0.12`
GHSA-jjcv-wr2g-4rv4 Microsoft Security Advisory CVE-2025-21172 \| .NET and Visual Studio Remote Code Execution Vulnerability	High EPSS 1.84%	`>= 8.0.0, < 8.0.12`	`8.0.12`
GHSA-jjcv-wr2g-4rv4 Microsoft Security Advisory CVE-2025-21172 \| .NET and Visual Studio Remote Code Execution Vulnerability	High EPSS 1.84%	`>= 9.0.0, < 9.0.1`	`9.0.1`
GHSA-p54p-p3qm-8vgj Microsoft Security Advisory CVE-2025-21171 \| .NET Remote Code Execution Vulnerability	High EPSS 1.72%	`>= 9.0.0, < 9.0.1`	`9.0.1`
GHSA-3r34-r6w3-fqp6 Microsoft Security Advisory CVE-2024-38167 \| .NET Information Disclosure Vulnerability	Medium EPSS 1.39%	`>= 8.0.0, < 8.0.8`	`8.0.8`
GHSA-447r-wph3-92pm Microsoft Security Advisory CVE-2024-38095 \| .NET Denial of Service Vulnerability	High EPSS 2.74%	`>= 6.0.0, < 6.0.32`	`6.0.32`
GHSA-447r-wph3-92pm Microsoft Security Advisory CVE-2024-38095 \| .NET Denial of Service Vulnerability	High EPSS 2.74%	`>= 8.0.0, < 8.0.7`	`8.0.7`
GHSA-7fcr-8qw6-92fr Microsoft Security Advisory CVE-2024-30045 \| .NET Remote code Execution Vulnerability	Medium EPSS 1.25%	`>= 7.0.0, < 7.0.19`	`7.0.19`
GHSA-7fcr-8qw6-92fr Microsoft Security Advisory CVE-2024-30045 \| .NET Remote code Execution Vulnerability	Medium EPSS 1.25%	`>= 8.0.0, < 8.0.5`	`8.0.5`
GHSA-5fxj-whcv-crrc Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability	High EPSS 3.09%	`>= 8.0.0, < 8.0.3`	`8.0.3`
GHSA-5fxj-whcv-crrc Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability	High EPSS 3.09%	`>= 7.0.0-preview.1.22076.8, < 7.0.17`	`7.0.17`
GHSA-h3hv-63q5-jgpr Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability	Medium EPSS 4.64%	`>= 6.0.0, < 6.0.22`	`6.0.22`
GHSA-h3hv-63q5-jgpr Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability	Medium EPSS 4.64%	`>= 7.0.0, < 7.0.11`	`7.0.11`
GHSA-555c-2p6r-68mm .NET Denial of Service vulnerability	High EPSS 2.63%	`>= 6.0.0, < 6.0.18`	`6.0.18`
GHSA-555c-2p6r-68mm .NET Denial of Service vulnerability	High EPSS 2.63%	`>= 7.0.0, < 7.0.7`	`7.0.7`
GHSA-jx7q-xxmw-44vf .NET Elevation of Privilege Vulnerability	High EPSS 1.56%	`>= 6.0.0, < 6.0.18`	`6.0.18`
GHSA-jx7q-xxmw-44vf .NET Elevation of Privilege Vulnerability	High EPSS 1.56%	`>= 7.0.0, < 7.0.7`	`7.0.7`
GHSA-x469-cv7m-77r9 .NET Remote Code Execution Vulnerability	High EPSS 1.00%	`>= 7.0.0, < 7.0.7`	`7.0.7`
GHSA-8f7f-vqg5-jrv9 .NET Denial of Service Vulnerability	High EPSS 2.84%	`>= 6.0.0, < 6.0.13`	`6.0.13`
GHSA-rh58-r7jh-xhx3 .NET Core Elevation of Privilege Vulnerability	High EPSS 3.90%	`>= 3.1.0, < 3.1.18`	`3.1.18`
GHSA-rh58-r7jh-xhx3 .NET Core Elevation of Privilege Vulnerability	High EPSS 3.90%	`>= 5.0.0, < 5.0.9`	`5.0.9`
GHSA-vgwq-hfqc-58wv .NET Core Information Disclosure Vulnerability	Medium EPSS 2.07%	`>= 3.1.0, < 3.1.18`	`3.1.18`
GHSA-vgwq-hfqc-58wv .NET Core Information Disclosure Vulnerability	Medium EPSS 2.07%	`>= 5.0.0, < 5.0.9`	`5.0.9`
GHSA-c6w8-7mp3-34j9 .NET Remote Code Execution Vulnerability	Medium EPSS 1.61%	`>= 3.0.0, < 3.1.23`	`3.1.23`
GHSA-c6w8-7mp3-34j9 .NET Remote Code Execution Vulnerability	Medium EPSS 1.61%	`>= 5.0.0, < 5.0.15`	`5.0.15`
GHSA-c6w8-7mp3-34j9 .NET Remote Code Execution Vulnerability	Medium EPSS 1.61%	`>= 6.0.0, < 6.0.3`	`6.0.3`
GHSA-3gp9-h8hw-pxpw Denial of service in .NET core	Medium EPSS 3.34%	`>= 5.0.0, < 5.0.3`	`5.0.3`
GHSA-3gp9-h8hw-pxpw Denial of service in .NET core	Medium EPSS 3.34%	`>= 3.1.0, < 3.1.12`	`3.1.12`
GHSA-3w5p-jhp5-c29q .NET Core & .NET Framework Denial of Service Vulnerability	High EPSS 6.46%	`>= 3.1.0, < 3.1.4`	`3.1.4`
GHSA-5v8v-66v8-mwm7 Integer overflow in the bundled Brotli C library	Critical EPSS 3.22%	`>= 3.0.0, < 3.1.23`	`3.1.23`
GHSA-5v8v-66v8-mwm7 Integer overflow in the bundled Brotli C library	Critical EPSS 3.22%	`>= 5.0.0, < 5.0.15`	`5.0.15`
GHSA-5v8v-66v8-mwm7 Integer overflow in the bundled Brotli C library	Critical EPSS 3.22%	`>= 6.0.0, < 6.0.3`	`6.0.3`
CVE-2020-1147 .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability Known exploited	High EPSS 95.80%	`>= 3.1.0, < 3.1.6`	`3.1.6`
CVE-2020-1147 .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability Known exploited	High EPSS 95.80%	`>= 3.1.0, < 3.1.6`	`3.1.6`

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor