Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.SignalR.Common and Microsoft.AspNetCore.SignalR.Core. This advisory also provides guidance on what developers can do to update their applications to remove this...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the MessageBuffer.ResendAsync process. An attacker can cause indefinite blocking of broadcasts and resource exhaustion by exploiting backpressure mechanisms in stateful reconnect...

GHSA-334F-VVP4-7G6P Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.SignalR.Common and Microsoft.AspNetCore.SignalR.Core. This advisory also provides guidance on what developers can do to update their applications to remove this...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the MessageBuffer.ResendAsync process. An attacker can cause indefinite blocking of broadcasts and resource exhaustion by exploiting backpressure mechanisms in stateful reconnect...