The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade dotnet-runtime-dbg-10.0Upgrade aspnetcore-targeting-pack-10.0Upgrade dotnet-templates-9.0Upgrade dotnet-sdk-aot-9.0Upgrade dotnet-templates-8.0Upgrade dotnet-sdk-dbg-8.0Upgrade aspnetcore-targeting-pack-9.0Upgrade dotnet-hostfxr-8.0Upgrade aspnetcore-runtime-9.0Upgrade netstandard-targeting-pack-2.1Upgrade dotnetUpgrade dotnet-sdk-10.0Upgrade dotnet-targeting-pack-8.0Upgrade aspnetcore-runtime-10.0Upgrade aspnetcore-runtime-dbg-8.0Upgrade dotnet-runtime-8.0Upgrade dotnet-runtime-dbg-9.0Upgrade dotnet-sdk-dbg-10.0Upgrade dotnet-hostfxr-10.0Upgrade dotnet-sdk-10.0-source-built-artifactsUpgrade dotnet-targeting-pack-9.0Upgrade dotnet-runtime-9.0Upgrade dotnet-sdk-9.0Upgrade dotnet-hostUpgrade dotnet-runtime-10.0Upgrade dotnet-apphost-pack-8.0Upgrade dotnet-sdk-8.0Upgrade dotnet-runtime-dbg-8.0Upgrade dotnet-sdk-9.0-source-built-artifactsUpgrade aspnetcore-runtime-dbg-10.0Upgrade dotnet-templates-10.0Upgrade dotnet-sdk-8.0-source-built-artifactsUpgrade dotnet-apphost-pack-9.0Upgrade dotnet-sdk-dbg-9.0Upgrade dotnet-hostfxr-9.0Upgrade aspnetcore-runtime-8.0Upgrade dotnet-targeting-pack-10.0Upgrade dotnet-sdk-aot-10.0Upgrade dotnet-apphost-pack-10.0Upgrade aspnetcore-targeting-pack-8.0Upgrade aspnetcore-runtime-dbg-9.0 | Oct 22, 2026 | Oct 20, 2026 |
| Alpine Linux | — | Upgrade dotnet8-runtimeUpgrade dotnet9-runtimeUpgrade dotnet10-runtime | Oct 20, 2026 | Oct 13, 2026 |
| Microsoft Asp_net_core | — | Upgrade ASP.NET Core Runtime 8.0 to laterUpgrade ASP.NET Core Runtime 10.0 to laterUpgrade ASP.NET Core Runtime 9.0 to later | Oct 13, 2026 | Oct 13, 2026 |
| Microsoft Visual_studio | — | Update Microsoft Visual Studio 2026 to the latest version in the current channel channel.Update Microsoft Visual Studio 2022 to the latest version in the current channel channel. | Oct 13, 2026 | Oct 13, 2026 |
| Oracle_linux | — | Upgrade dotnet-runtime-dbg-9.0Upgrade dotnet-sdk-8.0Upgrade netstandard-targeting-pack-2.1Upgrade dotnet-apphost-pack-8.0Upgrade dotnet-runtime-dbg-10.0Upgrade dotnet-hostfxr-10.0Upgrade aspnetcore-runtime-dbg-9.0Upgrade dotnet-runtime-9.0Upgrade dotnet-templates-9.0Upgrade dotnet-hostUpgrade aspnetcore-runtime-10.0Upgrade dotnet-targeting-pack-8.0Upgrade dotnet-sdk-dbg-8.0Upgrade dotnet-sdk-dbg-9.0Upgrade aspnetcore-runtime-dbg-10.0Upgrade dotnet-sdk-10.0Upgrade dotnet-templates-8.0Upgrade aspnetcore-targeting-pack-8.0Upgrade dotnet-sdk-9.0Upgrade aspnetcore-targeting-pack-10.0Upgrade dotnet-targeting-pack-9.0Upgrade aspnetcore-targeting-pack-9.0Upgrade dotnet-runtime-dbg-8.0Upgrade dotnet-sdk-9.0-source-built-artifactsUpgrade dotnet-runtime-8.0Upgrade dotnet-runtime-10.0Upgrade dotnet-hostfxr-9.0Upgrade dotnet-templates-10.0Upgrade dotnet-sdk-aot-9.0Upgrade aspnetcore-runtime-9.0Upgrade dotnet-targeting-pack-10.0Upgrade dotnet-sdk-8.0-source-built-artifactsUpgrade dotnet-apphost-pack-9.0Upgrade dotnet-sdk-dbg-10.0Upgrade dotnet-sdk-aot-10.0Upgrade dotnet-hostfxr-8.0Upgrade dotnet-sdk-10.0-source-built-artifactsUpgrade dotnet-apphost-pack-10.0Upgrade aspnetcore-runtime-dbg-8.0Upgrade aspnetcore-runtime-8.0 | Oct 22, 2026 | Oct 13, 2026 |
| Redhat_linux | — | Upgrade dotnet-runtime-10.0-debuginfoUpgrade dotnet-sdk-aot-10.0-debuginfoUpgrade dotnet-sdk-9.0Upgrade aspnetcore-runtime-8.0Upgrade dotnet-sdk-10.0-debuginfoUpgrade dotnet-sdk-dbg-9.0Upgrade dotnet-sdk-8.0-source-built-artifactsUpgrade dotnet-sdk-dbg-8.0Upgrade dotnet-hostUpgrade dotnet-templates-8.0Upgrade aspnetcore-runtime-dbg-9.0Upgrade dotnet-apphost-pack-9.0Upgrade dotnet-host-debuginfoUpgrade dotnet10.0-debuginfoUpgrade dotnet8.0-debuginfoUpgrade dotnet8.0-debugsourceUpgrade dotnet-apphost-pack-9.0-debuginfoUpgrade dotnet-targeting-pack-10.0Upgrade dotnet-sdk-dbg-10.0Upgrade dotnet-apphost-pack-10.0-debuginfoUpgrade dotnet-hostfxr-10.0-debuginfoUpgrade dotnet-sdk-aot-10.0Upgrade dotnet-sdk-8.0-debuginfoUpgrade dotnet9.0-debuginfoUpgrade dotnet-sdk-9.0-source-built-artifactsUpgrade dotnet-sdk-8.0Upgrade aspnetcore-runtime-dbg-10.0Upgrade aspnetcore-targeting-pack-8.0Upgrade dotnet-apphost-pack-8.0Upgrade dotnet-runtime-dbg-8.0Upgrade dotnet-hostfxr-8.0-debuginfoUpgrade netstandard-targeting-pack-2.1Upgrade dotnet10.0-debugsourceUpgrade dotnet-targeting-pack-8.0Upgrade dotnet-sdk-aot-9.0Upgrade dotnet-targeting-pack-9.0Upgrade dotnet9.0-debugsourceUpgrade aspnetcore-runtime-9.0Upgrade dotnet-sdk-10.0-source-built-artifactsUpgrade dotnet-runtime-10.0Upgrade dotnet-runtime-9.0Upgrade dotnet-apphost-pack-8.0-debuginfoUpgrade aspnetcore-runtime-10.0Upgrade dotnet-runtime-dbg-9.0Upgrade dotnet-sdk-10.0Upgrade dotnet-templates-9.0Upgrade dotnet-runtime-8.0Upgrade aspnetcore-targeting-pack-10.0Upgrade dotnet-templates-10.0Upgrade aspnetcore-runtime-dbg-8.0Upgrade dotnet-hostfxr-9.0Upgrade dotnet-hostfxr-8.0Upgrade dotnet-runtime-9.0-debuginfoUpgrade dotnet-sdk-aot-9.0-debuginfoUpgrade dotnet-runtime-8.0-debuginfoUpgrade aspnetcore-targeting-pack-9.0Upgrade dotnet-apphost-pack-10.0Upgrade dotnet-hostfxr-10.0Upgrade dotnetUpgrade dotnet-sdk-9.0-debuginfoUpgrade dotnet-runtime-dbg-10.0Upgrade dotnet-hostfxr-9.0-debuginfo | Oct 19, 2026 | Oct 13, 2026 |
| Rocky_linux | — | Upgrade dotnet-sdk-dbg-9.0Upgrade dotnet-templates-9.0Upgrade dotnet-host-debuginfoUpgrade dotnet-sdk-8.0-debuginfoUpgrade dotnet-hostfxr-10.0Upgrade aspnetcore-runtime-9.0Upgrade dotnet-templates-8.0Upgrade dotnet-runtime-9.0Upgrade dotnet-sdk-9.0-debuginfoUpgrade dotnet-sdk-aot-9.0Upgrade dotnet-sdk-aot-9.0-debuginfoUpgrade dotnet-hostfxr-8.0-debuginfoUpgrade dotnet-sdk-dbg-8.0Upgrade dotnet-runtime-8.0Upgrade aspnetcore-targeting-pack-9.0Upgrade dotnet-apphost-pack-8.0-debuginfoUpgrade dotnet-runtime-dbg-10.0Upgrade dotnet-sdk-10.0-source-built-artifactsUpgrade dotnet8.0-debugsourceUpgrade dotnet-targeting-pack-8.0Upgrade dotnet-runtime-dbg-9.0Upgrade aspnetcore-targeting-pack-10.0Upgrade aspnetcore-runtime-10.0Upgrade netstandard-targeting-pack-2.1Upgrade dotnet-targeting-pack-9.0Upgrade dotnet-runtime-9.0-debuginfoUpgrade dotnet-apphost-pack-9.0Upgrade dotnet-hostUpgrade dotnet9.0-debuginfoUpgrade dotnet-sdk-8.0Upgrade dotnet-sdk-8.0-source-built-artifactsUpgrade dotnet-apphost-pack-10.0-debuginfoUpgrade dotnet10.0-debugsourceUpgrade dotnet-templates-10.0Upgrade dotnet-sdk-aot-10.0Upgrade aspnetcore-runtime-dbg-10.0Upgrade aspnetcore-runtime-dbg-8.0Upgrade dotnet-sdk-10.0Upgrade aspnetcore-targeting-pack-8.0Upgrade dotnet-targeting-pack-10.0Upgrade dotnet-runtime-8.0-debuginfoUpgrade dotnet-runtime-10.0Upgrade aspnetcore-runtime-8.0Upgrade dotnet-sdk-9.0-source-built-artifactsUpgrade dotnet-hostfxr-9.0-debuginfoUpgrade dotnet-hostfxr-10.0-debuginfoUpgrade dotnet8.0-debuginfoUpgrade dotnet-runtime-10.0-debuginfoUpgrade dotnet9.0-debugsourceUpgrade dotnet-sdk-aot-10.0-debuginfoUpgrade dotnet-hostfxr-8.0Upgrade dotnet-apphost-pack-8.0Upgrade dotnet-sdk-9.0Upgrade dotnet-sdk-dbg-10.0Upgrade dotnet-sdk-10.0-debuginfoUpgrade dotnet-runtime-dbg-8.0Upgrade dotnet-apphost-pack-9.0-debuginfoUpgrade dotnet-apphost-pack-10.0Upgrade aspnetcore-runtime-dbg-9.0Upgrade dotnet-hostfxr-9.0Upgrade dotnet10.0-debuginfo | Oct 23, 2026 | Oct 22, 2026 |
| Ubuntu | — | Upgrade dotnet-host-8.0Upgrade dotnet-sdk-8.0Upgrade dotnet10Upgrade dotnet-hostfxr-10.0Upgrade dotnet-sdk-10.0Upgrade dotnet8Upgrade dotnet-sdk-dbg-10.0Upgrade dotnet-host-10.0Upgrade aspnetcore-runtime-8.0Upgrade aspnetcore-runtime-10.0Upgrade dotnet-runtime-8.0Upgrade dotnet-sdk-aot-10.0Upgrade dotnet-hostfxr-8.0Upgrade dotnet-runtime-10.0 | Oct 21, 2026 | Oct 20, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub