Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.3.6
purl pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.3.6
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-cju3-5hjk-h3d3 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 10.0 , ASP.NET Core 9.0 , ASP.NET Core 8.0, and ASP.NET Core 2.3. This advisory also provides guidance on what developers can do to update their applications to address this vulnerability. Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network. CVE-2025-55315
GHSA-5rrx-jjjq-q2r5

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T16:06:51.144516+00:00 GHSA Importer Fixing VCID-cju3-5hjk-h3d3 https://github.com/advisories/GHSA-5rrx-jjjq-q2r5 38.0.0
2026-04-01T12:54:30.296007+00:00 GithubOSV Importer Fixing VCID-cju3-5hjk-h3d3 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/10/GHSA-5rrx-jjjq-q2r5/GHSA-5rrx-jjjq-q2r5.json 38.0.0
2026-04-01T12:52:59.848050+00:00 GitLab Importer Fixing VCID-cju3-5hjk-h3d3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Microsoft.AspNetCore.Server.Kestrel.Core/CVE-2025-55315.yml 38.0.0