{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Microsoft.AspNetCore.SignalR.Core: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/microsoft--microsoft-aspnetcore-signalr-core/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/microsoft--microsoft-aspnetcore-signalr-core/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · disclosed",
   "content_text": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · fixed in AlmaLinux 10 (aspnetcore-runtime-10.0 10.0.13-1.el10_2 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el10_2, aspnetcore-runtime-8.0 8.0.32-1.el10_2, aspnetcore-runtime-9.0 9.0.21-1.el10_2, aspnetcore-runtime-dbg-10.0 10.0.13-1.el10_2, aspnetcore-runtime-dbg-8.0 8.0.32-1.el10_2, aspnetcore-runtime-dbg-9.0 9.0.21-1.el10_2, aspnetcore-targeting-pack-10.0 10.0.13-1.el10_2, aspnetcore-targeting-pack-8.0 8.0.32-1.el10_2, aspnetcore-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-apphost-pack-10.0 10.0.13-1.el10_2, dotnet-apphost-pack-8.0 8.0.32-1.el10_2, dotnet-apphost-pack-9.0 9.0.21-1.el10_2, dotnet-host 10.0.13-1.el10_2, dotnet-hostfxr-10.0 10.0.13-1.el10_2, dotnet-hostfxr-8.0 8.0.32-1.el10_2, dotnet-hostfxr-9.0 9.0.21-1.el10_2, dotnet-runtime-10.0 10.0.13-1.el10_2, dotnet-runtime-8.0 8.0.32-1.el10_2, dotnet-runtime-9.0 9.0.21-1.el10_2, dotnet-runtime-dbg-10.0 10.0.13-1.el10_2, dotnet-runtime-dbg-8.0 8.0.32-1.el10_2, dotnet-runtime-dbg-9.0 9.0.21-1.el10_2, dotnet-sdk-10.0 10.0.113-1.el10_2, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el10_2, dotnet-sdk-8.0 8.0.132-1.el10_2, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el10_2, dotnet-sdk-9.0 9.0.122-1.el10_2, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el10_2, dotnet-sdk-aot-10.0 10.0.113-1.el10_2, dotnet-sdk-aot-9.0 9.0.122-1.el10_2, dotnet-sdk-dbg-10.0 10.0.113-1.el10_2, dotnet-sdk-dbg-8.0 8.0.132-1.el10_2, dotnet-sdk-dbg-9.0 9.0.122-1.el10_2, dotnet-targeting-pack-10.0 10.0.13-1.el10_2, dotnet-targeting-pack-8.0 8.0.32-1.el10_2, dotnet-targeting-pack-9.0 9.0.21-1.el10_2, dotnet-templates-10.0 10.0.113-1.el10_2, dotnet-templates-8.0 8.0.132-1.el10_2, dotnet-templates-9.0 9.0.122-1.el10_2, netstandard-targeting-pack-2.1 9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · fixed in AlmaLinux 8 (aspnetcore-runtime-10.0 10.0.13-1.el8_10 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el8_10, aspnetcore-runtime-8.0 8.0.32-2.el8_10, aspnetcore-runtime-9.0 9.0.21-1.el8_10, aspnetcore-runtime-dbg-10.0 10.0.13-1.el8_10, aspnetcore-runtime-dbg-8.0 8.0.32-2.el8_10, aspnetcore-runtime-dbg-9.0 9.0.21-1.el8_10, aspnetcore-targeting-pack-10.0 10.0.13-1.el8_10, aspnetcore-targeting-pack-8.0 8.0.32-2.el8_10, aspnetcore-targeting-pack-9.0 9.0.21-1.el8_10, dotnet 10.0.113-1.el8_10, dotnet-apphost-pack-10.0 10.0.13-1.el8_10, dotnet-apphost-pack-8.0 8.0.32-2.el8_10, dotnet-apphost-pack-9.0 9.0.21-1.el8_10, dotnet-hostfxr-10.0 10.0.13-1.el8_10, dotnet-hostfxr-8.0 8.0.32-2.el8_10, dotnet-hostfxr-9.0 9.0.21-1.el8_10, dotnet-runtime-10.0 10.0.13-1.el8_10, dotnet-runtime-8.0 8.0.32-2.el8_10, dotnet-runtime-9.0 9.0.21-1.el8_10, dotnet-runtime-dbg-10.0 10.0.13-1.el8_10, dotnet-runtime-dbg-8.0 8.0.32-2.el8_10, dotnet-runtime-dbg-9.0 9.0.21-1.el8_10, dotnet-sdk-10.0 10.0.113-1.el8_10, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el8_10, dotnet-sdk-8.0 8.0.132-2.el8_10, dotnet-sdk-8.0-source-built-artifacts 8.0.132-2.el8_10, dotnet-sdk-9.0 9.0.122-1.el8_10, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el8_10, dotnet-sdk-aot-10.0 10.0.113-1.el8_10, dotnet-sdk-aot-9.0 9.0.122-1.el8_10, dotnet-sdk-dbg-10.0 10.0.113-1.el8_10, dotnet-sdk-dbg-8.0 8.0.132-2.el8_10, dotnet-sdk-dbg-9.0 9.0.122-1.el8_10, dotnet-targeting-pack-10.0 10.0.13-1.el8_10, dotnet-targeting-pack-8.0 8.0.32-2.el8_10, dotnet-targeting-pack-9.0 9.0.21-1.el8_10, dotnet-templates-10.0 10.0.113-1.el8_10, dotnet-templates-8.0 8.0.132-2.el8_10, dotnet-templates-9.0 9.0.122-1.el8_10, netstandard-targeting-pack-2.1 9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · fixed in AlmaLinux 9 (aspnetcore-runtime-10.0 10.0.13-1.el9_8 and 39 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-10.0 10.0.13-1.el9_8, aspnetcore-runtime-8.0 8.0.32-1.el9_8, aspnetcore-runtime-9.0 9.0.21-1.el9_8, aspnetcore-runtime-dbg-10.0 10.0.13-1.el9_8, aspnetcore-runtime-dbg-8.0 8.0.32-1.el9_8, aspnetcore-runtime-dbg-9.0 9.0.21-1.el9_8, aspnetcore-targeting-pack-10.0 10.0.13-1.el9_8, aspnetcore-targeting-pack-8.0 8.0.32-1.el9_8, aspnetcore-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-apphost-pack-10.0 10.0.13-1.el9_8, dotnet-apphost-pack-8.0 8.0.32-1.el9_8, dotnet-apphost-pack-9.0 9.0.21-1.el9_8, dotnet-host 10.0.13-1.el9_8, dotnet-hostfxr-10.0 10.0.13-1.el9_8, dotnet-hostfxr-8.0 8.0.32-1.el9_8, dotnet-hostfxr-9.0 9.0.21-1.el9_8, dotnet-runtime-10.0 10.0.13-1.el9_8, dotnet-runtime-8.0 8.0.32-1.el9_8, dotnet-runtime-9.0 9.0.21-1.el9_8, dotnet-runtime-dbg-10.0 10.0.13-1.el9_8, dotnet-runtime-dbg-8.0 8.0.32-1.el9_8, dotnet-runtime-dbg-9.0 9.0.21-1.el9_8, dotnet-sdk-10.0 10.0.113-1.el9_8, dotnet-sdk-10.0-source-built-artifacts 10.0.113-1.el9_8, dotnet-sdk-8.0 8.0.132-1.el9_8, dotnet-sdk-8.0-source-built-artifacts 8.0.132-1.el9_8, dotnet-sdk-9.0 9.0.122-1.el9_8, dotnet-sdk-9.0-source-built-artifacts 9.0.122-1.el9_8, dotnet-sdk-aot-10.0 10.0.113-1.el9_8, dotnet-sdk-aot-9.0 9.0.122-1.el9_8, dotnet-sdk-dbg-10.0 10.0.113-1.el9_8, dotnet-sdk-dbg-8.0 8.0.132-1.el9_8, dotnet-sdk-dbg-9.0 9.0.122-1.el9_8, dotnet-targeting-pack-10.0 10.0.13-1.el9_8, dotnet-targeting-pack-8.0 8.0.32-1.el9_8, dotnet-targeting-pack-9.0 9.0.21-1.el9_8, dotnet-templates-10.0 10.0.113-1.el9_8, dotnet-templates-8.0 8.0.132-1.el9_8, dotnet-templates-9.0 9.0.122-1.el9_8, netstandard-targeting-pack-2.1 9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/fixed/chainguard",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · fixed in Chainguard (aspnet-8-targeting-pack 8.0.132-r0 and 1 more)",
   "content_text": "Fixed versions: aspnet-8-targeting-pack 8.0.132-r0, aspnet-9-targeting-pack 9.0.122-r0.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/fixed/nuget",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · fixed upstream (NuGet)",
   "content_text": "Fixed versions: Microsoft.AspNetCore.SignalR.Common 10.0.13, Microsoft.AspNetCore.SignalR.Common 11.0.0-rc.2, Microsoft.AspNetCore.SignalR.Common 8.0.32, Microsoft.AspNetCore.SignalR.Common 9.0.21.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · fixed in Red Hat hummingbird 1 (aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1 and 33 more)",
   "content_text": "Fixed versions: aspnetcore-runtime-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-9.0 0:9.0.21-0.1.hum1, aspnetcore-runtime-dbg-8.0 0:8.0.32-0.1.hum1, aspnetcore-runtime-dbg-9.0 0:9.0.21-0.1.hum1, aspnetcore-targeting-pack-8.0 0:8.0.32-0.1.hum1, aspnetcore-targeting-pack-9.0 0:9.0.21-0.1.hum1, dotnet-apphost-pack-8.0 0:8.0.32-0.1.hum1, dotnet-apphost-pack-9.0 0:9.0.21-0.1.hum1, dotnet-hostfxr-8.0 0:8.0.32-0.1.hum1, dotnet-hostfxr-9.0 0:9.0.21-0.1.hum1, dotnet-runtime-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-9.0 0:9.0.21-0.1.hum1, dotnet-runtime-dbg-8.0 0:8.0.32-0.1.hum1, dotnet-runtime-dbg-9.0 0:9.0.21-0.1.hum1, dotnet-sdk-10.0 0:10.0.113-1.hum1, dotnet-sdk-10.0-source-built-artifacts 0:10.0.113-1.hum1, dotnet-sdk-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-8.0-source-built-artifacts 0:8.0.132-0.1.hum1, dotnet-sdk-9.0 0:9.0.122-0.1.hum1, dotnet-sdk-9.0-source-built-artifacts 0:9.0.122-0.1.hum1, dotnet-sdk-aot-10.0 0:10.0.113-1.hum1, dotnet-sdk-aot-9.0 0:9.0.122-0.1.hum1, dotnet-sdk-dbg-10.0 0:10.0.113-1.hum1, dotnet-sdk-dbg-8.0 0:8.0.132-0.1.hum1, dotnet-sdk-dbg-9.0 0:9.0.122-0.1.hum1, dotnet-targeting-pack-8.0 0:8.0.32-0.1.hum1, dotnet-targeting-pack-9.0 0:9.0.21-0.1.hum1, dotnet-templates-10.0 0:10.0.113-1.hum1, dotnet-templates-8.0 0:8.0.132-0.1.hum1, dotnet-templates-9.0 0:9.0.122-0.1.hum1, dotnet10.0 0:10.0.113-1.hum1, dotnet8.0 0:8.0.132-0.1.hum1, dotnet9.0 0:9.0.122-0.1.hum1, netstandard-targeting-pack-2.1 0:9.0.122-0.1.hum1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · fixed in Rocky Linux 10 (dotnet10.0 0:10.0.113-1.el10_2 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el10_2, dotnet8.0 0:8.0.132-1.el10_2, dotnet9.0 0:9.0.122-1.el10_2.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · fixed in Rocky Linux 8 (dotnet10.0 0:10.0.113-1.el8_10 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el8_10, dotnet8.0 0:8.0.132-2.el8_10, dotnet9.0 0:9.0.122-1.el8_10.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · fixed in Rocky Linux 9 (dotnet10.0 0:10.0.113-1.el9_8 and 2 more)",
   "content_text": "Fixed versions: dotnet10.0 0:10.0.113-1.el9_8, dotnet8.0 0:8.0.132-1.el9_8, dotnet9.0 0:9.0.122-1.el9_8.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · fixed in Ubuntu 22.04 LTS (dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1)",
   "content_text": "Fixed versions: dotnet8 8.0.132-8.0.32-0ubuntu1~22.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · fixed in Ubuntu 24.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~24.04.1, dotnet8 8.0.132-8.0.32-0ubuntu1~24.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · fixed in Ubuntu 26.04 LTS (dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.04.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · fixed in Ubuntu 26.10 (dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1 and 1 more)",
   "content_text": "Fixed versions: dotnet10 10.0.113-10.0.13-0ubuntu1~26.10.1, dotnet11 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1.",
   "date_published": "2026-10-13T19:00:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70159/fixed/wolfi",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70159/",
   "title": "CVE-2026-70159 · Microsoft Visual Studio 2022 version 17.14 · fixed in Wolfi (aspnet-8-targeting-pack 8.0.132-r0 and 1 more)",
   "content_text": "Fixed versions: aspnet-8-targeting-pack 8.0.132-r0, aspnet-9-targeting-pack 9.0.122-r0.",
   "date_published": "2026-10-13T19:00:26Z"
  }
 ]
}