{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/50827?format=json","vulnerability_id":"VCID-qyfs-eq91-qbbc","summary":".NET Denial of Service Vulnerability\nMicrosoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nA denial of service vulnerability exists in ASP.NET Core due to uncontrolled resource consumption. A specially crafted message to a SignalR server can exhaust an internal buffer and cause a Denial of Service.","aliases":[{"alias":"CVE-2026-26130"},{"alias":"GHSA-4vgm-c2wm-63mw"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/74601?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm@8.0.25","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm@8.0.25"},{"url":"http://public2.vulnerablecode.io/api/packages/74749?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm@9.0.14","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm@9.0.14"},{"url":"http://public2.vulnerablecode.io/api/packages/74750?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm@10.0.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm@10.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/74705?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64@8.0.25","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64@8.0.25"},{"url":"http://public2.vulnerablecode.io/api/packages/74706?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64@9.0.14","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64@9.0.14"},{"url":"http://public2.vulnerablecode.io/api/packages/74707?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64@10.0.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64@10.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/74843?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm@8.0.25","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm@8.0.25"},{"url":"http://public2.vulnerablecode.io/api/packages/74844?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm@9.0.14","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm@9.0.14"},{"url":"http://public2.vulnerablecode.io/api/packages/74845?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm@10.0.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm@10.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/74834?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64@8.0.25","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64@8.0.25"},{"url":"http://public2.vulnerablecode.io/api/packages/74835?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64@9.0.14","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64@9.0.14"},{"url":"http://public2.vulnerablecode.io/api/packages/74836?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64@10.0.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64@10.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/74733?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64@8.0.25","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64@8.0.25"},{"url":"http://public2.vulnerablecode.io/api/packages/74734?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64@9.0.14","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64@9.0.14"},{"url":"http://public2.vulnerablecode.io/api/packages/74735?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64@10.0.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64@10.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/74815?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.25","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.25"},{"url":"http://public2.vulnerablecode.io/api/packages/74816?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.14","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.14"},{"url":"http://public2.vulnerablecode.io/api/packages/74817?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-x64@10.0.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-x64@10.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/74677?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64@8.0.25","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64@8.0.25"},{"url":"http://public2.vulnerablecode.io/api/packages/74678?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64@9.0.14","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64@9.0.14"},{"url":"http://public2.vulnerablecode.io/api/packages/74679?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64@10.0.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64@10.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/74850?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-x64@8.0.25","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-x64@8.0.25"},{"url":"http://public2.vulnerablecode.io/api/packages/74851?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-x64@9.0.14","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-x64@9.0.14"},{"url":"http://public2.vulnerablecode.io/api/packages/74852?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-x64@10.0.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-x64@10.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/74767?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm@8.0.25","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm@8.0.25"},{"url":"http://public2.vulnerablecode.io/api/packages/74768?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm@9.0.14","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm@9.0.14"},{"url":"http://public2.vulnerablecode.io/api/packages/74769?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm@10.0.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm@10.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/74698?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm64@8.0.25","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm64@8.0.25"},{"url":"http://public2.vulnerablecode.io/api/packages/74699?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm64@9.0.14","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm64@9.0.14"},{"url":"http://public2.vulnerablecode.io/api/packages/74700?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm64@10.0.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm64@10.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/74797?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x64@8.0.25","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x64@8.0.25"},{"url":"http://public2.vulnerablecode.io/api/packages/74798?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x64@9.0.14","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x64@9.0.14"},{"url":"http://public2.vulnerablecode.io/api/packages/74799?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x64@10.0.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x64@10.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/74822?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x86@8.0.25","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x86@8.0.25"},{"url":"http://public2.vulnerablecode.io/api/packages/74823?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x86@9.0.14","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x86@9.0.14"},{"url":"http://public2.vulnerablecode.io/api/packages/74824?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x86@10.0.4","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x86@10.0.4"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/68944?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-as33-d56d-fqek"},{"vulnerability":"VCID-qyfs-eq91-qbbc"},{"vulnerability":"VCID-xq33-4675-fkfm"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74747?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm@9.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm@9.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74748?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm@10.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm@10.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/68924?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-as33-d56d-fqek"},{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74703?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64@9.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64@9.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74704?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64@10.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-arm64@10.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/68963?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-as33-d56d-fqek"},{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74841?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm@9.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm@9.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74842?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm@10.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm@10.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/68895?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-as33-d56d-fqek"},{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74832?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64@9.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64@9.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74833?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64@10.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64@10.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/68920?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-as33-d56d-fqek"},{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74731?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64@9.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64@9.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74732?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64@10.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-musl-x64@10.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/68956?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-as33-d56d-fqek"},{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74813?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74814?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-x64@10.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.linux-x64@10.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/68948?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-as33-d56d-fqek"},{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74675?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64@9.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64@9.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74676?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64@10.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-arm64@10.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/68912?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-x64@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-as33-d56d-fqek"},{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-x64@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74848?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-x64@9.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-x64@9.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74849?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-x64@10.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.osx-x64@10.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/68881?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-as33-d56d-fqek"},{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74765?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm@9.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm@9.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74766?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm@10.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm@10.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/68952?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm64@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-as33-d56d-fqek"},{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm64@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74696?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm64@9.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm64@9.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74697?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm64@10.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-arm64@10.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/68916?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x64@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-as33-d56d-fqek"},{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x64@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74795?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x64@9.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x64@9.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74796?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x64@10.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x64@10.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/68940?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x86@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-as33-d56d-fqek"},{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x86@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74820?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x86@9.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x86@9.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/74821?format=json","purl":"pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x86@10.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qyfs-eq91-qbbc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App.Runtime.win-x86@10.0.0"}],"references":[{"reference_url":"https://github.com/dotnet/aspnetcore","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/dotnet/aspnetcore"},{"reference_url":"https://www.cve.org/CVERecord?id=CVE-2026-26130","reference_id":"","reference_type":"","scores":[],"url":"https://www.cve.org/CVERecord?id=CVE-2026-26130"},{"reference_url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26130","reference_id":"CVE-2026-26130","reference_type":"","scores":[],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26130"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26130","reference_id":"CVE-2026-26130","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26130"},{"reference_url":"https://github.com/advisories/GHSA-4vgm-c2wm-63mw","reference_id":"GHSA-4vgm-c2wm-63mw","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-4vgm-c2wm-63mw"},{"reference_url":"https://github.com/dotnet/aspnetcore/security/advisories/GHSA-4vgm-c2wm-63mw","reference_id":"GHSA-4vgm-c2wm-63mw","reference_type":"","scores":[],"url":"https://github.com/dotnet/aspnetcore/security/advisories/GHSA-4vgm-c2wm-63mw"}],"weaknesses":[{"cwe_id":770,"name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":null,"exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qyfs-eq91-qbbc"}