Microsoft.NetCore.App.Runtime.linux-musl-x64 (NuGet)
Advisories
97
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 11.0.0-rc.2 or later clears every advisory below that has a fix.
Upgrade commands
dotnet
dotnet add package Microsoft.NetCore.App.Runtime.linux-musl-x64 --version 11.0.0-rc.2Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-87vj-4hqv-22p9 Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 0.99% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-87vj-4hqv-22p9 Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 0.99% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-87vj-4hqv-22p9 Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 0.99% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-87vj-4hqv-22p9 Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 0.99% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-2j93-m82w-73j2 Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability |
High EPSS 0.41% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-2j93-m82w-73j2 Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability |
High EPSS 0.41% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-2j93-m82w-73j2 Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability |
High EPSS 0.41% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-2j93-m82w-73j2 Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability |
High EPSS 0.41% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-w6wh-p4g7-mpj2 Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability |
High EPSS 0.41% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-w6wh-p4g7-mpj2 Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability |
High EPSS 0.41% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-w6wh-p4g7-mpj2 Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability |
High EPSS 0.41% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-w6wh-p4g7-mpj2 Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability |
High EPSS 0.41% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-fqpq-cx42-9jmm Microsoft Security Advisory CVE-2026-70194 - .NET and Visual Studio Security Feature Bypass Vulnerability |
Medium EPSS 0.49% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-3rxq-g8rj-r2cf Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-3rxq-g8rj-r2cf Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-3rxq-g8rj-r2cf Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-3rxq-g8rj-r2cf Microsoft Security Advisory CVE-2026-69651 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-wxxw-5cvc-53j7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.78% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-wxxw-5cvc-53j7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.78% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-wxxw-5cvc-53j7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.78% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-wxxw-5cvc-53j7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability |
Medium EPSS 0.78% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-mc4q-93x5-f6hj Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 8.0.0, < 8.0.32 | 8.0.32 |
| GHSA-mc4q-93x5-f6hj Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 11.0.0-preview.1, < 11.0.0-rc.2 | 11.0.0-rc.2 |
| GHSA-mc4q-93x5-f6hj Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 9.0.0, < 9.0.21 | 9.0.21 |
| GHSA-mc4q-93x5-f6hj Microsoft Security Advisory CVE-2026-58280 - .NET and Visual Studio Denial of Service Vulnerability |
High EPSS 1.25% |
>= 10.0.0, < 10.0.13 | 10.0.13 |
| GHSA-9mr8-pwpw-3j2w Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.34% |
>= 10.0.0, < 10.0.11 | 10.0.11 |
| GHSA-9mr8-pwpw-3j2w Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.34% |
>= 8.0.0, < 8.0.30 | 8.0.30 |
| GHSA-9mr8-pwpw-3j2w Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability |
High EPSS 0.34% |
>= 9.0.0, < 9.0.19 | 9.0.19 |
| GHSA-m93f-wj8c-rp8p Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability |
High EPSS 1.23% |
>= 9.0.0, < 9.0.19 | 9.0.19 |
| GHSA-m93f-wj8c-rp8p Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability |
High EPSS 1.23% |
>= 8.0.0, < 8.0.30 | 8.0.30 |
| GHSA-m93f-wj8c-rp8p Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability |
High EPSS 1.23% |
>= 10.0.0, < 10.0.11 | 10.0.11 |
| GHSA-r6mh-95jw-g7qg Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability |
Medium EPSS 0.75% |
>= 10.0.0, < 10.0.11 | 10.0.11 |
| GHSA-r6mh-95jw-g7qg Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability |
Medium EPSS 0.75% |
>= 9.0.0, < 9.0.19 | 9.0.19 |
| GHSA-r6mh-95jw-g7qg Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability |
Medium EPSS 0.75% |
>= 8.0.0, < 8.0.30 | 8.0.30 |
| GHSA-74jp-vm22-8q8x Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability |
Medium EPSS 0.74% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-74jp-vm22-8q8x Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability |
Medium EPSS 0.74% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-74jp-vm22-8q8x Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability |
Medium EPSS 0.74% |
>= 8.0.0, < 8.0.29 | 8.0.29 |
| GHSA-wp74-jgxh-gv4q Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-wp74-jgxh-gv4q Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 8.0.0, < 8.0.29 | 8.0.29 |
| GHSA-wp74-jgxh-gv4q Microsoft Security Advisory CVE-2026-50651 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-qvw7-jm5c-6hqw Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability |
High EPSS 0.61% |
>= 8.0.0, < 8.0.29 | 8.0.29 |
| GHSA-qvw7-jm5c-6hqw Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability |
High EPSS 0.61% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-qvw7-jm5c-6hqw Microsoft Security Advisory CVE-2026-50528 – .NET Security Feature Bypass Vulnerability |
High EPSS 0.61% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-w7cw-xp7h-6j5j Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability |
High EPSS 1.23% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-w7cw-xp7h-6j5j Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability |
High EPSS 1.23% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-w7cw-xp7h-6j5j Microsoft Security Advisory CVE-2026-50524 – .NET Denial of Service Vulnerability |
High EPSS 1.23% |
>= 8.0.0, < 8.0.29 | 8.0.29 |
| GHSA-cvvh-rhrc-wg4q Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 8.0.0, < 8.0.29 | 8.0.29 |
| GHSA-cvvh-rhrc-wg4q Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-cvvh-rhrc-wg4q Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-rp2p-6cmp-jxj9 Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 8.0.0, < 8.0.29 | 8.0.29 |
| GHSA-rp2p-6cmp-jxj9 Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 10.0.0, < 10.0.10 | 10.0.10 |
| GHSA-rp2p-6cmp-jxj9 Microsoft Security Advisory CVE-2026-57108 – .NET Denial of Service Vulnerability |
High EPSS 1.17% |
>= 9.0.0, < 9.0.18 | 9.0.18 |
| GHSA-vmwf-m9c5-3jvc Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability |
High EPSS 2.28% |
>= 9.0.0, < 9.0.15 | 9.0.15 |
| GHSA-vmwf-m9c5-3jvc Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability |
High EPSS 2.28% |
>= 8.0.0, < 8.0.26 | 8.0.26 |
| GHSA-vmwf-m9c5-3jvc Microsoft Security Advisory CVE-2026-32178 – .NET Spoofing Vulnerability |
High EPSS 2.28% |
>= 10.0.0, < 10.0.6 | 10.0.6 |
| GHSA-387c-qmrw-59qv Duplicate Advisory: Microsoft Security Advisory CVE-2026-26131 – .NET Elevation of Privilege Vulnerability Withdrawn |
High | >= 10.0.0, < 10.0.4 | 10.0.4 |
| GHSA-crjq-wm6x-6qx7 .NET Elevation of Privilege Vulnerability |
High EPSS 0.37% |
>= 10.0.0, < 10.0.4 | 10.0.4 |
| GHSA-73j8-2gch-69rq .NET Denial of Service Vulnerability |
High EPSS 2.13% |
>= 9.0.0, < 9.0.14 | 9.0.14 |
| GHSA-73j8-2gch-69rq .NET Denial of Service Vulnerability |
High EPSS 2.13% |
>= 10.0.0, < 10.0.4 | 10.0.4 |
| GHSA-gwq6-fmvp-qp68 Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability |
Medium EPSS 0.72% |
>= 9.0.0, < 9.0.10 | 9.0.10 |
| GHSA-gwq6-fmvp-qp68 Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability |
Medium EPSS 0.72% |
>= 8.0.0, < 8.0.21 | 8.0.21 |
| GHSA-266m-wp2v-x7mq Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability |
High EPSS 1.07% |
>= 8.0.0, < 8.0.17 | 8.0.17 |
| GHSA-266m-wp2v-x7mq Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability |
High EPSS 1.07% |
>= 9.0.0, < 9.0.6 | 9.0.6 |
| GHSA-gjf6-3w4p-7xfh Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 2.38% |
>= 8.0.0, < 8.0.12 | 8.0.12 |
| GHSA-gjf6-3w4p-7xfh Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 2.38% |
>= 9.0.0, < 9.0.1 | 9.0.1 |
| GHSA-jjcv-wr2g-4rv4 Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 1.84% |
>= 8.0.0, < 8.0.12 | 8.0.12 |
| GHSA-jjcv-wr2g-4rv4 Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability |
High EPSS 1.84% |
>= 9.0.0, < 9.0.1 | 9.0.1 |
| GHSA-p54p-p3qm-8vgj Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability |
High EPSS 1.72% |
>= 9.0.0, < 9.0.1 | 9.0.1 |
| GHSA-3r34-r6w3-fqp6 Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability |
Medium EPSS 1.39% |
>= 8.0.0, < 8.0.8 | 8.0.8 |
| GHSA-447r-wph3-92pm Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability |
High EPSS 2.74% |
>= 6.0.0, < 6.0.32 | 6.0.32 |
| GHSA-447r-wph3-92pm Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability |
High EPSS 2.74% |
>= 8.0.0, < 8.0.7 | 8.0.7 |
| GHSA-7fcr-8qw6-92fr Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability |
Medium EPSS 1.25% |
>= 8.0.0, < 8.0.5 | 8.0.5 |
| GHSA-7fcr-8qw6-92fr Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability |
Medium EPSS 1.25% |
>= 7.0.0, < 7.0.19 | 7.0.19 |
| GHSA-5fxj-whcv-crrc Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability |
High EPSS 3.09% |
>= 8.0.0, < 8.0.3 | 8.0.3 |
| GHSA-5fxj-whcv-crrc Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability |
High EPSS 3.09% |
>= 7.0.0-preview.1.22076.8, < 7.0.17 | 7.0.17 |
| GHSA-h3hv-63q5-jgpr Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability |
Medium EPSS 4.64% |
>= 6.0.0, < 6.0.22 | 6.0.22 |
| GHSA-h3hv-63q5-jgpr Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability |
Medium EPSS 4.64% |
>= 7.0.0, < 7.0.11 | 7.0.11 |
| GHSA-555c-2p6r-68mm .NET Denial of Service vulnerability |
High EPSS 2.63% |
>= 7.0.0, < 7.0.7 | 7.0.7 |
| GHSA-555c-2p6r-68mm .NET Denial of Service vulnerability |
High EPSS 2.63% |
>= 6.0.0, < 6.0.18 | 6.0.18 |
| GHSA-jx7q-xxmw-44vf .NET Elevation of Privilege Vulnerability |
High EPSS 1.56% |
>= 6.0.0, < 6.0.18 | 6.0.18 |
| GHSA-jx7q-xxmw-44vf .NET Elevation of Privilege Vulnerability |
High EPSS 1.56% |
>= 7.0.0, < 7.0.7 | 7.0.7 |
| GHSA-x469-cv7m-77r9 .NET Remote Code Execution Vulnerability |
High EPSS 1.00% |
>= 7.0.0, < 7.0.7 | 7.0.7 |
| GHSA-8f7f-vqg5-jrv9 .NET Denial of Service Vulnerability |
High EPSS 2.84% |
>= 6.0.0, < 6.0.13 | 6.0.13 |
| GHSA-rh58-r7jh-xhx3 .NET Core Elevation of Privilege Vulnerability |
High EPSS 3.90% |
>= 3.1.0, < 3.1.18 | 3.1.18 |
| GHSA-rh58-r7jh-xhx3 .NET Core Elevation of Privilege Vulnerability |
High EPSS 3.90% |
>= 5.0.0, < 5.0.9 | 5.0.9 |
| GHSA-vgwq-hfqc-58wv .NET Core Information Disclosure Vulnerability |
Medium EPSS 2.07% |
>= 5.0.0, < 5.0.9 | 5.0.9 |
| GHSA-vgwq-hfqc-58wv .NET Core Information Disclosure Vulnerability |
Medium EPSS 2.07% |
>= 3.1.0, < 3.1.18 | 3.1.18 |
| GHSA-c6w8-7mp3-34j9 .NET Remote Code Execution Vulnerability |
Medium EPSS 1.61% |
>= 3.0.0, < 3.1.23 | 3.1.23 |
| GHSA-c6w8-7mp3-34j9 .NET Remote Code Execution Vulnerability |
Medium EPSS 1.61% |
>= 6.0.0, < 6.0.3 | 6.0.3 |
| GHSA-c6w8-7mp3-34j9 .NET Remote Code Execution Vulnerability |
Medium EPSS 1.61% |
>= 5.0.0, < 5.0.15 | 5.0.15 |
| GHSA-3gp9-h8hw-pxpw Denial of service in .NET core |
Medium EPSS 3.34% |
>= 5.0.0, < 5.0.3 | 5.0.3 |
| GHSA-3gp9-h8hw-pxpw Denial of service in .NET core |
Medium EPSS 3.34% |
>= 3.1.0, < 3.1.12 | 3.1.12 |
| GHSA-3w5p-jhp5-c29q .NET Core & .NET Framework Denial of Service Vulnerability |
High EPSS 6.46% |
>= 3.1.0, < 3.1.4 | 3.1.4 |
| GHSA-5v8v-66v8-mwm7 Integer overflow in the bundled Brotli C library |
Critical EPSS 3.22% |
>= 6.0.0, < 6.0.3 | 6.0.3 |
| GHSA-5v8v-66v8-mwm7 Integer overflow in the bundled Brotli C library |
Critical EPSS 3.22% |
>= 5.0.0, < 5.0.15 | 5.0.15 |
| CVE-2020-1147 .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability Known exploited |
High EPSS 95.80% |
>= 3.1.0, < 3.1.6 | 3.1.6 |
| CVE-2020-1147 .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability Known exploited |
High EPSS 95.80% |
>= 3.1.0, < 3.1.6 | 3.1.6 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor