Microsoft Security Advisory CVE-2026-118749 - ASP.NET Core Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core. This advisory provides guidance on updating affected applications and components. Minimal API validation repeatedly copies a growing validation-error dictionary, allowing...

GHSA-M28H-PJ36-4364 Microsoft Security Advisory CVE-2026-118749 - ASP.NET Core Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core. This advisory provides guidance on updating affected applications and components. Minimal API validation repeatedly copies a growing validation-error dictionary, allowing...

PT-2026-143811

Name of the Vulnerable Software and Affected Versions ASP.NET Core versions 11.0.0-rc.1.26425.128 through 11.0.0-rc.3.26522.148 Microsoft.Extensions.Validation versions 11.0.0-rc.1.26425.128 through 11.0.0-rc.3.26522.148 Description Inefficient algorithmic complexity in ASP.NET Core allows an...