{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Microsoft ASP.NET Core 9.0: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/microsoft--asp-net-core-9-0/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/microsoft--asp-net-core-9-0/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88092/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88092/",
   "title": "CVE-2026-88092 · Microsoft ASP.NET Core 10.0 · disclosed",
   "content_text": "Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.",
   "date_published": "2026-10-13T19:01:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88092/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88092/",
   "title": "CVE-2026-88092 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88092/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88092/",
   "title": "CVE-2026-88092 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88092/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88092/",
   "title": "CVE-2026-88092 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88092/fixed/amazon-linux-2023",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88092/",
   "title": "CVE-2026-88092 · Microsoft ASP.NET Core 10.0 · fixed in Amazon Linux 2023 (aspnetcore-runtime-10.0 10.0.13-1.amzn2023.0.1 and 45 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.amzn2023.0.1, aspnetcore-runtime-8.0 8.0.32-1.amzn2023.0.1, aspnetcore-runtime-9.0 9.0.21-1.amzn2023.0.1, aspnetcore-runtime-dbg-10.0 10.0.13-1.amzn2023.0.1, aspnetcore-runtime-dbg-8.0 8.0.32-1.amzn2023.0.1, aspnetcore-runtime-dbg-9.0 9.0.21-1.amzn2023.0.1, aspnetcore-targeting-pack-10.0 10.0.13-1.amzn2023.0.1, aspnetcore-targeting-pack-8.0 8.0.32-1.amzn2023.0.1, aspnetcore-targeting-pack-9.0 9.0.21-1.amzn2023.0.1, dotnet 10.0.113-1.amzn2023.0.1, dotnet 8.0.132-1.amzn2023.0.1, dotnet 9.0.122-1.amzn2023.0.1, dotnet-apphost-pack-10.0 10.0.13-1.amzn2023.0.1, dotnet-apphost-pack-8.0 8.0.32-1.amzn2023.0.1, dotnet-apphost-pack-9.0 9.0.21-1.amzn2023.0.1, dotnet-host 10.0.13-1.amzn2023.0.1, dotnet-host 8.0.32-1.amzn2023.0.1, dotnet-host 9.0.21-1.amzn2023.0.1, dotnet-hostfxr-10.0 10.0.13-1.amzn2023.0.1, dotnet-hostfxr-8.0 8.0.32-1.amzn2023.0.1, dotnet-hostfxr-9.0 9.0.21-1.amzn2023.0.1, dotnet-runtime-10.0 10.0.13-1.amzn2023.0.1, dotnet-runtime-8.0 8.0.32-1.amzn2023.0.1, dotnet-runtime-9.0 9.0.21-1.amzn2023.0.1, dotnet-runtime-dbg-10.0 10.0.13-1.amzn2023.0.1, dotnet-runtime-dbg-8.0 8.0.32-1.amzn2023.0.1, dotnet-runtime-dbg-9.0 9.0.21-1.amzn2023.0.1, dotnet-sdk-10.0 10.0.113-1.amzn2023.0.1, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.amzn2023.0.1, dotnet-sdk-8.0 8.0.132-1.amzn2023.0.1, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.amzn2023.0.1, dotnet-sdk-9.0 9.0.122-1.amzn2023.0.1, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.amzn2023.0.1, dotnet-sdk-aot-10.0 10.0.113-1.amzn2023.0.1, dotnet-sdk-aot-9.0 9.0.122-1.amzn2023.0.1, dotnet-sdk-dbg-10.0 10.0.113-1.amzn2023.0.1, dotnet-sdk-dbg-8.0 8.0.132-1.amzn2023.0.1, dotnet-sdk-dbg-9.0 9.0.122-1.amzn2023.0.1, dotnet-targeting-pack-10.0 10.0.13-1.amzn2023.0.1, dotnet-targeting-pack-8.0 8.0.32-1.amzn2023.0.1, dotnet-targeting-pack-9.0 9.0.21-1.amzn2023.0.1, dotnet-templates-10.0 10.0.113-1.amzn2023.0.1, dotnet-templates-8.0 8.0.132-1.amzn2023.0.1, dotnet-templates-9.0 9.0.122-1.amzn2023.0.1, netstandard-targeting-pack-2.1 8.0.132-1.amzn2023.0.1, netstandard-targeting-pack-2.1 9.0.122-1.amzn2023.0.1.",
   "date_published": "2026-10-13T19:01:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88092/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88092/",
   "title": "CVE-2026-88092 · Microsoft ASP.NET Core 10.0 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.AspNetCore.App.Runtime.linux-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-arm 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.osx-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.osx-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.osx-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.osx-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.osx-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.osx-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.osx-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.osx-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.win-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.win-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.win-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.win-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-x86 10.0.13, Microsoft.AspNetCore.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.win-x86 8.0.32, Microsoft.AspNetCore.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:01:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88092/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88092/",
   "title": "CVE-2026-88092 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:01:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88092/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88092/",
   "title": "CVE-2026-88092 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:01:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88092/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88092/",
   "title": "CVE-2026-88092 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:01:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88092/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88092/",
   "title": "CVE-2026-88092 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:01:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88092/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88092/",
   "title": "CVE-2026-88092 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:01:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88092/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88092/",
   "title": "CVE-2026-88092 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:01:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88092/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88092/",
   "title": "CVE-2026-88092 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:01:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96236/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96236/",
   "title": "CVE-2026-96236 · Microsoft ASP.NET Core 10.0 · disclosed",
   "content_text": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
   "date_published": "2026-10-13T19:00:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96236/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96236/",
   "title": "CVE-2026-96236 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96236/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96236/",
   "title": "CVE-2026-96236 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96236/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96236/",
   "title": "CVE-2026-96236 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96236/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96236/",
   "title": "CVE-2026-96236 · Microsoft ASP.NET Core 10.0 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.AspNetCore.App.Runtime.linux-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-arm 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.osx-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.osx-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.osx-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.osx-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.osx-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.osx-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.osx-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.osx-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.win-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.win-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.win-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.win-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-x86 10.0.13, Microsoft.AspNetCore.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.win-x86 8.0.32, Microsoft.AspNetCore.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:00:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96236/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96236/",
   "title": "CVE-2026-96236 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96236/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96236/",
   "title": "CVE-2026-96236 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96236/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96236/",
   "title": "CVE-2026-96236 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96236/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96236/",
   "title": "CVE-2026-96236 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:00:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96236/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96236/",
   "title": "CVE-2026-96236 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:00:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96236/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96236/",
   "title": "CVE-2026-96236 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:00:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96236/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96236/",
   "title": "CVE-2026-96236 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:00:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70188/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70188/",
   "title": "CVE-2026-70188 · Microsoft ASP.NET Core 10.0 · disclosed",
   "content_text": "Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70188/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70188/",
   "title": "CVE-2026-70188 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70188/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70188/",
   "title": "CVE-2026-70188 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70188/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70188/",
   "title": "CVE-2026-70188 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70188/fixed/amazon-linux-2023",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70188/",
   "title": "CVE-2026-70188 · Microsoft ASP.NET Core 10.0 · fixed in Amazon Linux 2023 (aspnetcore-runtime-10.0 10.0.13-1.amzn2023.0.1 and 45 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.amzn2023.0.1, aspnetcore-runtime-8.0 8.0.32-1.amzn2023.0.1, aspnetcore-runtime-9.0 9.0.21-1.amzn2023.0.1, aspnetcore-runtime-dbg-10.0 10.0.13-1.amzn2023.0.1, aspnetcore-runtime-dbg-8.0 8.0.32-1.amzn2023.0.1, aspnetcore-runtime-dbg-9.0 9.0.21-1.amzn2023.0.1, aspnetcore-targeting-pack-10.0 10.0.13-1.amzn2023.0.1, aspnetcore-targeting-pack-8.0 8.0.32-1.amzn2023.0.1, aspnetcore-targeting-pack-9.0 9.0.21-1.amzn2023.0.1, dotnet 10.0.113-1.amzn2023.0.1, dotnet 8.0.132-1.amzn2023.0.1, dotnet 9.0.122-1.amzn2023.0.1, dotnet-apphost-pack-10.0 10.0.13-1.amzn2023.0.1, dotnet-apphost-pack-8.0 8.0.32-1.amzn2023.0.1, dotnet-apphost-pack-9.0 9.0.21-1.amzn2023.0.1, dotnet-host 10.0.13-1.amzn2023.0.1, dotnet-host 8.0.32-1.amzn2023.0.1, dotnet-host 9.0.21-1.amzn2023.0.1, dotnet-hostfxr-10.0 10.0.13-1.amzn2023.0.1, dotnet-hostfxr-8.0 8.0.32-1.amzn2023.0.1, dotnet-hostfxr-9.0 9.0.21-1.amzn2023.0.1, dotnet-runtime-10.0 10.0.13-1.amzn2023.0.1, dotnet-runtime-8.0 8.0.32-1.amzn2023.0.1, dotnet-runtime-9.0 9.0.21-1.amzn2023.0.1, dotnet-runtime-dbg-10.0 10.0.13-1.amzn2023.0.1, dotnet-runtime-dbg-8.0 8.0.32-1.amzn2023.0.1, dotnet-runtime-dbg-9.0 9.0.21-1.amzn2023.0.1, dotnet-sdk-10.0 10.0.113-1.amzn2023.0.1, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.amzn2023.0.1, dotnet-sdk-8.0 8.0.132-1.amzn2023.0.1, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.amzn2023.0.1, dotnet-sdk-9.0 9.0.122-1.amzn2023.0.1, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.amzn2023.0.1, dotnet-sdk-aot-10.0 10.0.113-1.amzn2023.0.1, dotnet-sdk-aot-9.0 9.0.122-1.amzn2023.0.1, dotnet-sdk-dbg-10.0 10.0.113-1.amzn2023.0.1, dotnet-sdk-dbg-8.0 8.0.132-1.amzn2023.0.1, dotnet-sdk-dbg-9.0 9.0.122-1.amzn2023.0.1, dotnet-targeting-pack-10.0 10.0.13-1.amzn2023.0.1, dotnet-targeting-pack-8.0 8.0.32-1.amzn2023.0.1, dotnet-targeting-pack-9.0 9.0.21-1.amzn2023.0.1, dotnet-templates-10.0 10.0.113-1.amzn2023.0.1, dotnet-templates-8.0 8.0.132-1.amzn2023.0.1, dotnet-templates-9.0 9.0.122-1.amzn2023.0.1, netstandard-targeting-pack-2.1 8.0.132-1.amzn2023.0.1, netstandard-targeting-pack-2.1 9.0.122-1.amzn2023.0.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70188/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70188/",
   "title": "CVE-2026-70188 · Microsoft ASP.NET Core 10.0 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.AspNetCore.App.Runtime.linux-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-arm 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.osx-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.osx-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.osx-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.osx-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.osx-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.osx-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.osx-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.osx-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.win-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.win-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.win-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.win-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-x86 10.0.13, Microsoft.AspNetCore.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.win-x86 8.0.32, Microsoft.AspNetCore.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70188/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70188/",
   "title": "CVE-2026-70188 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70188/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70188/",
   "title": "CVE-2026-70188 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70188/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70188/",
   "title": "CVE-2026-70188 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70188/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70188/",
   "title": "CVE-2026-70188 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70188/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70188/",
   "title": "CVE-2026-70188 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70188/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70188/",
   "title": "CVE-2026-70188 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70188/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70188/",
   "title": "CVE-2026-70188 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70183/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70183/",
   "title": "CVE-2026-70183 · Microsoft ASP.NET Core 10.0 · disclosed",
   "content_text": "Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70183/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70183/",
   "title": "CVE-2026-70183 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70183/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70183/",
   "title": "CVE-2026-70183 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70183/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70183/",
   "title": "CVE-2026-70183 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70183/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70183/",
   "title": "CVE-2026-70183 · Microsoft ASP.NET Core 10.0 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.AspNetCore.App.Runtime.linux-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-arm 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.osx-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.osx-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.osx-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.osx-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.osx-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.osx-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.osx-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.osx-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.win-arm 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.win-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.win-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.win-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.win-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.win-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.win-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.win-x64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.win-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.win-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-x86 10.0.13, Microsoft.AspNetCore.App.Runtime.win-x86 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.win-x86 8.0.32, Microsoft.AspNetCore.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70183/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70183/",
   "title": "CVE-2026-70183 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70183/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70183/",
   "title": "CVE-2026-70183 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70183/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70183/",
   "title": "CVE-2026-70183 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70183/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70183/",
   "title": "CVE-2026-70183 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70183/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70183/",
   "title": "CVE-2026-70183 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70183/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70183/",
   "title": "CVE-2026-70183 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70183/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70183/",
   "title": "CVE-2026-70183 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70181/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70181/",
   "title": "CVE-2026-70181 · Microsoft ASP.NET Core 10.0 · disclosed",
   "content_text": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70181/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70181/",
   "title": "CVE-2026-70181 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70181/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70181/",
   "title": "CVE-2026-70181 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70181/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70181/",
   "title": "CVE-2026-70181 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70181/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70181/",
   "title": "CVE-2026-70181 · Microsoft ASP.NET Core 10.0 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.AspNetCore.App.Runtime.linux-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.osx-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.osx-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.osx-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.osx-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.osx-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.osx-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.win-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.win-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.win-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.win-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.win-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.win-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.win-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-x86 10.0.13, Microsoft.AspNetCore.App.Runtime.win-x86 8.0.32, Microsoft.AspNetCore.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70181/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70181/",
   "title": "CVE-2026-70181 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70181/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70181/",
   "title": "CVE-2026-70181 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70181/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70181/",
   "title": "CVE-2026-70181 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70181/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70181/",
   "title": "CVE-2026-70181 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70181/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70181/",
   "title": "CVE-2026-70181 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70181/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70181/",
   "title": "CVE-2026-70181 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70181/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70181/",
   "title": "CVE-2026-70181 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70175/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70175/",
   "title": "CVE-2026-70175 · Microsoft ASP.NET Core 10.0 · disclosed",
   "content_text": "Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70175/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70175/",
   "title": "CVE-2026-70175 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70175/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70175/",
   "title": "CVE-2026-70175 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70175/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70175/",
   "title": "CVE-2026-70175 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70175/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70175/",
   "title": "CVE-2026-70175 · Microsoft ASP.NET Core 10.0 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.AspNetCore.App.Runtime.linux-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.osx-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.osx-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.osx-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.osx-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.osx-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.osx-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.win-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.win-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.win-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.win-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.win-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.win-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.win-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-x86 10.0.13, Microsoft.AspNetCore.App.Runtime.win-x86 8.0.32, Microsoft.AspNetCore.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70175/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70175/",
   "title": "CVE-2026-70175 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70175/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70175/",
   "title": "CVE-2026-70175 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70175/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70175/",
   "title": "CVE-2026-70175 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70175/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70175/",
   "title": "CVE-2026-70175 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70175/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70175/",
   "title": "CVE-2026-70175 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70175/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70175/",
   "title": "CVE-2026-70175 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70175/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70175/",
   "title": "CVE-2026-70175 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70186/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70186/",
   "title": "CVE-2026-70186 · Microsoft ASP.NET Core 10.0 · disclosed",
   "content_text": "Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
   "date_published": "2026-10-13T19:00:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70186/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70186/",
   "title": "CVE-2026-70186 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70186/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70186/",
   "title": "CVE-2026-70186 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70186/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70186/",
   "title": "CVE-2026-70186 · Microsoft ASP.NET Core 10.0 · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70186/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70186/",
   "title": "CVE-2026-70186 · Microsoft ASP.NET Core 10.0 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.AspNetCore.App.Runtime.linux-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-musl-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.linux-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.linux-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.linux-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.osx-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.osx-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.osx-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.osx-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.osx-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.osx-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-arm64 10.0.13, Microsoft.AspNetCore.App.Runtime.win-arm64 8.0.32, Microsoft.AspNetCore.App.Runtime.win-arm64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-x64 10.0.13, Microsoft.AspNetCore.App.Runtime.win-x64 8.0.32, Microsoft.AspNetCore.App.Runtime.win-x64 9.0.21, Microsoft.AspNetCore.App.Runtime.win-x86 10.0.13, Microsoft.AspNetCore.App.Runtime.win-x86 8.0.32, Microsoft.AspNetCore.App.Runtime.win-x86 9.0.21.",
   "date_published": "2026-10-13T19:00:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70186/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70186/",
   "title": "CVE-2026-70186 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70186/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70186/",
   "title": "CVE-2026-70186 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70186/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70186/",
   "title": "CVE-2026-70186 · Microsoft ASP.NET Core 10.0 · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70186/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70186/",
   "title": "CVE-2026-70186 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:00:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70186/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70186/",
   "title": "CVE-2026-70186 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:00:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70186/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70186/",
   "title": "CVE-2026-70186 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:00:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70186/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70186/",
   "title": "CVE-2026-70186 · Microsoft ASP.NET Core 10.0 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:00:25Z"
  }
 ]
}