GHSA-QJPX-JQM5-H2C4 Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Components.WebAssembly.Server. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. The Blazor...

Cross-site Scripting (XSS)

Overview Microsoft.AspNetCore.Components.WebAssembly.Server is a runtime server features for ASP.NET Core Blazor applications that have a client running under WebAssembly. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the /framework/debug endpoint, which reflect...

Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Components.WebAssembly.Server. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. The Blazor...