Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
.NET
.NET / System.Formats.Cbor
Inefficient Algorithmic Complexity
System.Formats.Cbor >= 6.0.0, < 6.0.0.2; >= 8.0.0-0, < 8.0.2; >= 9.0.0-0, < 9.0.24; >= 10.0.0-0, < 10.0.15; >= 11.0.0-0, < 11.0.0
Nov 11, 2026
High
.NET
.NET
Heap-based Buffer Overflow
>=6.0.0 <=6.0.48; Microsoft.DiaSymReader.Native < 18.9.1-beta1.26515.1
Nov 11, 2026
High
.NET
.NET
Heap-based Buffer Overflow
>=6.0.0 <=6.0.48; Microsoft.DiaSymReader.Native < 18.9.1-beta1.26515.1
Nov 11, 2026
High
.NET
.NET
Stack-based Buffer Overflow
>=6.0.0 <=6.0.48; Microsoft.DiaSymReader.Native < 18.9.1-beta1.26515.1
Nov 11, 2026
High
.NET
.NET
Stack-based Buffer Overflow
Deserialization of Untrusted Data
>=6.0.0 <=6.0.48; Microsoft.DiaSymReader.Native < 18.9.1-beta1.26515.1
Nov 11, 2026
High
.NET
.NET
Heap-based Buffer Overflow
>=6.0.0 <=6.0.48; Microsoft.DiaSymReader.Native < 18.9.1-beta1.26515.1
Nov 11, 2026
High
.NET
ASP.NET Core / Multipart form parsing
Allocation of Resources Without Limits or Throttling
>= 6.0.0 <= 6.0.48
Nov 11, 2026
High
.NET
ASP.NET Core / SignalR Redis scale-out
Uncontrolled Resource Consumption
Microsoft.AspNetCore.SignalR.StackExchangeRedis >= 6.0.0, <= 6.0.48 (NES for .NET 6) · >= 8.0.0-preview.1.23112.2, <= 8.0.33 · >= 9.0.0-preview.1.24081.5, <= 9.0.22 · >= 10.0.0-preview.1.25120.3, <= 10.0.14 · >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148
Nov 11, 2026
Critical
.NET
ASP.NET Core / SignalR
Incorrect Authorization
>= 6.0.0, <= 6.0.48 (NES for .NET 6) · >= 8.0.0-preview.1.23112.2, <= 8.0.33 · >= 9.0.0-preview.1.24081.5, <= 9.0.22 · >= 10.0.0-preview.1.25120.3, <= 10.0.14 · >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148 · Microsoft.AspNetCore.Http.Connections >= 1.2.0, <= 1.2.13 (ASP.NET Core 2.3)
Nov 11, 2026
High
.NET
ASP.NET Core / HTTP header parsing
Inefficient Algorithmic Complexity
>= 6.0.0 <= 6.0.48
Nov 11, 2026
Medium
.NET
ASP.NET Core / Cookie path generation
Improper Encoding or Escaping of Output
>= 6.0.0 <= 6.0.48
Nov 11, 2026
High
.NET
.NET Runtime / System.Net.HttpListener
Uncontrolled Recursion
>= 6.0.0, <= 6.0.48; >= 8.0.0-0, <= 8.0.33; >= 9.0.0-0, <= 9.0.22; >= 10.0.0-0, <= 10.0.14; >= 11.0.0-preview.1.26104.118, <= 11.0.0-rc.3.26522.148 (Linux and macOS)
Nov 11, 2026
High
.NET
.NET SDK
Incorrectly Configured Access Control
.NET SDK >= 6.0.300 <= 6.0.439 (bundled VSTest 17.2 and 17.3)
Nov 11, 2026
Medium
Apache ActiveMQ Artemis
Apache ActiveMQ Artemis
Information Exposure
>=1.5.1 <2.40.0
Nov 11, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.