asp.net_core_11.0 vulnerabilities
CVEs whose affected-version data names the asp.net_core_11.0 package (nuget). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-70188Critical· 9.1Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
▾ MidnightMicrosoft · ASP.NET Core 10.0EPSS 0.94%via NVD
CVE-2026-70183High· 7.5Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
▾ TwilightMicrosoft · ASP.NET Core 10.0EPSS 0.53%via NVD