Vulnerability Directory

If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.

Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.

Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.

Talk to Our Experts
Get Pricing
Codey gradient
Filter by Severity
Filter by Technology
Filter by Category
Filtering by:
Severity
=
Text for Severity
Close icon
Clear Filters
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
High
Open in new tab icon
CVE-2026-87697
.NET
.NET (Windows Presentation Foundation)
Deserialization of Untrusted Data
>=6.0.0 <=6.0.46
Oct 13, 2026
Medium
Open in new tab icon
CVE-2026-70196
.NET
ASP.NET Core / Form parsing
Inefficient Algorithmic Complexity
>=6.0.0 <=6.0.46
Oct 13, 2026
Medium
Open in new tab icon
CVE-2026-96229
.NET
.NET (Windows Presentation Foundation)
Insufficiently Protected Credentials
>=6.0.0 <=6.0.46
Oct 13, 2026
High
Open in new tab icon
CVE-2026-58280
.NET
.NET
Uncontrolled Recursion
Microsoft.NETCore.App, Microsoft.AspNetCore.App, Microsoft.WindowsDesktop.App >= 6.0.0 <= 6.0.46; System.Security.Cryptography.Xml >= 6.0.0 <= 6.0.2.2
Oct 13, 2026
Critical
Open in new tab icon
CVE-2026-88092
.NET
ASP.NET Core / Kestrel
Inconsistent Interpretation of HTTP Requests
>=6.0.0 <=6.0.46
Oct 13, 2026
High
Open in new tab icon
CVE-2026-69651
.NET
.NET
Inefficient Algorithmic Complexity
Microsoft.NETCore.App, Microsoft.AspNetCore.App, Microsoft.WindowsDesktop.App >= 6.0.0 <= 6.0.46; System.Security.Cryptography.Xml >= 6.0.0 <= 6.0.2.2
Oct 13, 2026
High
Open in new tab icon
CVE-2026-70175
.NET
ASP.NET Core / Identity UI
Weak Authentication
>=6.0.0 <=6.0.46
Oct 13, 2026
High
Open in new tab icon
CVE-2026-96958
.NET
.NET
Inefficient Algorithmic Complexity
Microsoft.AspNetCore.App, Microsoft.WindowsDesktop.App >= 6.0.0 <= 6.0.46; System.Security.Cryptography.Xml >= 6.0.0 <= 6.0.2.2
Oct 13, 2026
High
Open in new tab icon
CVE-2026-70179
.NET
ASP.NET Core / Negotiate authentication
Weak Authentication
>=6.0.0 <=6.0.46
Oct 13, 2026
High
Open in new tab icon
CVE-2026-96230
.NET
ASP.NET Core / Blazor WebAssembly debugging
Cross-Site Scripting
>=6.0.0 <=6.0.46
Oct 13, 2026
High
Open in new tab icon
CVE-2026-96959
.NET
.NET
Allocation of Resources Without Limits or Throttling
Microsoft.AspNetCore.App, Microsoft.WindowsDesktop.App >= 6.0.0 <= 6.0.46; System.Security.Cryptography.Xml >= 6.0.0 <= 6.0.2.2
Oct 13, 2026
High
Open in new tab icon
CVE-2026-96231
.NET
.NET
Improper Link Resolution Before File Access ('Link Following')
>=6.0.0 <=6.0.46 (Linux and macOS)
Oct 13, 2026
High
Open in new tab icon
CVE-2026-70181
.NET
ASP.NET Core / Form and multipart buffering
Allocation of Resources Without Limits or Throttling
>=6.0.0 <=6.0.46
Oct 13, 2026
High
Open in new tab icon
CVE-2026-96225
.NET
.NET
Improper Link Resolution Before File Access ('Link Following')
>=6.0.0 <=6.0.46 (Linux and macOS)
Oct 13, 2026
High
Open in new tab icon
CVE-2026-70161
.NET
.NET SDK
Path Traversal
>=6.0.100 <=6.0.437 (Windows)
Oct 13, 2026
Exclamation icon
No results found

Please enter a valid Vulnerability ID number or Technology name.

Sign up for the latest vulnerability alerts
Rss feed icon
Subscribe via RSS
or

By submitting the form I acknowledge receipt of our Privacy Policy.

Thanks for signing up for our Newsletter! We look forward to connecting with you.
Oops! Something went wrong while submitting the form.