Announcing NES for .NET Containers

The Container Paradox

When a crucial LTS release like .NET 8, or even .NET 6 before it, hits End-of-Life (EOL), upstream support ends, leaving applications without official security patches, bug fixes, or compliance coverage.

Running EOL platforms in production is a systemic risk, particularly when vulnerabilities, like the critical-impact CVE-2025-55315 (CVSS 9.9) in ASP.NET Core, persist in EOL versions like .NET 6. The absence of a CVE and upstream patch for .NET 6 on such a severe parser-level bug does not imply safety, it signals a compliance and security gap that organizations cannot tolerate.

Containers, while simplifying deployment and cloud-native strategies, cannot secure a vulnerable runtime. The necessity of rapid migration to a supported version, like .NET 10, is often a multi-quarter effort that cannot be rushed, creating a security gap dictated by a support calendar.

‍

The Solution

HeroDevs is proud to announce the availability of Never-Ending Support (NES) for .NET Containers, a secure, drop-in replacement designed to eliminate the risks associated with unsupported software in containerized environments.

NES for .NET acts as a critical security bridge, delivering ongoing security patches, CVE remediation, and compliance coverage for teams that need more time, allowing applications to stay patched and compliance posture intact on a timeline that makes sense for the business.

‍

The NES Container Advantage

NES for .NET Containers are offered for the essential components of the .NET ecosystem, including the .NET Runtime, ASP.NET Core, and the .NET SDK. 

NES for .NET Containers ensure guaranteed security updates for EOL versions such as .NET 6, .NET 8, and .NET 9, providing continued protection and reliability while your enterprise plans and executes its migration plans. Linux containers support multiple distributions, including Debian, Ubuntu, and Enterprise Linux, with the option for more distributions upon request to meet diverse enterprise needs. 

For Windows environments, containers are available based on Windows Server Core images for versions 2022 and 2025. NES for .NET Containers are distributed directly through the HeroDevs OCI-compatible container registry, facilitating easy and secure access to these resources. Migration to NES for .NET Containers can be as simple as updating a single line in your Dockerfile or YAML.

‍

Enterprise-Grade Security and Build Assurance

• The CI/CD Rigor: The docker containers are built and tested in HeroDevs’ fully automated CI/CD system, secured on Azure with SOC2 compliance.
• Security & Reproducibility: This system provides reproducible builds, automatically scanned for vulnerabilities, and already in production with enterprise customers today, now generally available.

‍

Deep Integration with the .NET Security Ecosystem

Timely Patching Guarantee: HeroDevs is an active member of the crucial .NET Security Group, working alongside Microsoft, Red Hat, and Canonical. This role ensures we receive advance disclosure of Common Vulnerabilities and Exposures (CVEs).

This collaboration allows HeroDevs to build, validate, and publish patched NES container builds concurrently with Microsoft’s own Patch Tuesday releases, dramatically reducing the window of vulnerability.

‍

Beyond the Runtime

In addition to the .NET Runtime, ASP.NET, and SDK, HeroDevs can also provide support for your open source dependencies through NES for .NET Essentials Plus, as well as Entity Framework. This addresses the complexity of modern enterprise applications that rely on external dependencies.

‍

Regain Control Over Your Security Timeline

By leveraging NES for .NET Containers, organizations stop the security clock on their EOL systems. This frees engineering teams from reactive patching and allows them to focus on the strategic transition to .NET 10, utilizing tools like the modernize-dotnet agent, on a timeline dictated by business needs, not security mandates.

‍

The Larger HeroDevs Commitment

The NES for .NET Container offering is an extension of HeroDevs' dedication to a secure, stable, and sustainable open source .NET ecosystem, backed by our partnership with the .NET Foundation and our Open Source Sustainability Fund.

Do not let EOL systems become your greatest liability. Talk to HeroDevs today to secure the NES for .NET Containers bridge and guarantee security patches for your containerized .NET future.