Start Debugging

Tag: aspnetcore

32 posts · Page 4 of 4

2026-04-21 dotnet aspnetcore security

.NET 10.0.7 Ships Out-of-Band to Fix CVE-2026-40372 in ASP.NET Core Data Protection

A HMAC validation flaw in Microsoft.AspNetCore.DataProtection 10.0.0 through 10.0.6 lets attackers forge ciphertexts. .NET 10.0.7 is the mandatory fix.

2026-04-08 dotnet aspnetcore dotnet-11

Kestrel Drops Exceptions from Its HTTP/1.1 Parser in .NET 11

Kestrel's HTTP/1.1 request parser in .NET 11 replaces BadHttpRequestException with a result struct, cutting malformed-request overhead by up to 40%.