Stateward All advisories →
high
CVE-2026-26130
NuGet · Microsoft.AspNetCore.App.Runtime.linux-arm • NuGet · Microsoft.AspNetCore.App.Runtime.linux-arm64 • NuGet · Microsoft.AspNetCore.App.Runtime.linux-musl-arm • NuGet · Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 • NuGet · Microsoft.AspNetCore.App.Runtime.linux-musl-x64 • NuGet · Microsoft.AspNetCore.App.Runtime.linux-x64 • NuGet · Microsoft.AspNetCore.App.Runtime.osx-arm64 • NuGet · Microsoft.AspNetCore.App.Runtime.osx-x64 • NuGet · Microsoft.AspNetCore.App.Runtime.win-arm • NuGet · Microsoft.AspNetCore.App.Runtime.win-arm64 • NuGet · Microsoft.AspNetCore.App.Runtime.win-x64 • NuGet · Microsoft.AspNetCore.App.Runtime.win-x86
Summary .NET Denial of Service Vulnerability
Severity high EPSS 2.9% (p87) Also known as GHSA-4vgm-c2wm-63mw#Microsoft.AspNetCore.App.Runtime.linux-arm, GHSA-4vgm-c2wm-63mw#Microsoft.AspNetCore.App.Runtime.linux-arm64, GHSA-4vgm-c2wm-63mw#Microsoft.AspNetCore.App.Runtime.linux-musl-arm, GHSA-4vgm-c2wm-63mw#Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, GHSA-4vgm-c2wm-63mw#Microsoft.AspNetCore.App.Runtime.linux-musl-x64, GHSA-4vgm-c2wm-63mw#Microsoft.AspNetCore.App.Runtime.linux-x64, GHSA-4vgm-c2wm-63mw#Microsoft.AspNetCore.App.Runtime.osx-arm64, GHSA-4vgm-c2wm-63mw#Microsoft.AspNetCore.App.Runtime.osx-x64, GHSA-4vgm-c2wm-63mw#Microsoft.AspNetCore.App.Runtime.win-arm, GHSA-4vgm-c2wm-63mw#Microsoft.AspNetCore.App.Runtime.win-arm64, GHSA-4vgm-c2wm-63mw#Microsoft.AspNetCore.App.Runtime.win-x64, GHSA-4vgm-c2wm-63mw#Microsoft.AspNetCore.App.Runtime.win-x86, BIT-aspnet-core-2026-26130 Published 2026-03-11 Related advisories CVE-2026-88092 — critical · NuGet/Microsoft.AspNetCore.App.Runtime.linux-armCVE-2026-70188 — critical · NuGet/Microsoft.AspNetCore.App.Runtime.linux-armCVE-2025-55315 — critical · NuGet/Microsoft.AspNetCore.App.Runtime.linux-armCVE-2026-70186 — high · NuGet/Microsoft.AspNetCore.App.Runtime.linux-armCVE-2026-96236 — high · NuGet/Microsoft.AspNetCore.App.Runtime.linux-armCVE-2026-70183 — high · NuGet/Microsoft.AspNetCore.App.Runtime.linux-armCVE-2026-70181 — high · NuGet/Microsoft.AspNetCore.App.Runtime.linux-armCVE-2026-70175 — high · NuGet/Microsoft.AspNetCore.App.Runtime.linux-armIs your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.
Check my repo