Topic: CVE, page 3

.NET 11.0.0-rc.1 released for testing

.NET 11.0.0-rc.1 was released on 2026-09-08. It ships .NET Runtime 11.0.0-rc.1.26425.128, ASP.NET Core Runtime 11.0.0-rc.1.26425.128, SDK 11.0.100-rc.1.26425.128. The official release metadata lists 6 CVEs addressed in this release. .NET 11.0 is an STS release currently in the "go-live" support phase. It has since been superseded by .NET 11.0.0-rc.2.

.NET 8.0.31 released with fixes for 5 CVEs

.NET 8.0.31 was released on 2026-09-08. It ships .NET Runtime 8.0.31, ASP.NET Core Runtime 8.0.31, SDK 8.0.425, 8.0.131. The official release metadata lists 5 CVEs addressed in this release. .NET 8.0 is an LTS release currently in the "maintenance" support phase, with support ending on 2026-11-10. It has since been superseded by .NET 8.0.32.

.NET 9.0.20 released with fixes for 6 CVEs

.NET 9.0.20 was released on 2026-09-08. It ships .NET Runtime 9.0.20, ASP.NET Core Runtime 9.0.20, SDK 9.0.318, 9.0.121. The official release metadata lists 6 CVEs addressed in this release. .NET 9.0 is an STS release currently in the "maintenance" support phase, with support ending on 2026-11-10. It has since been superseded by .NET 9.0.21.

.NET 10.0.11 released with fixes for 10 CVEs

.NET 10.0.11 was released on 2026-08-11. It ships .NET Runtime 10.0.11, ASP.NET Core Runtime 10.0.11, SDK 10.0.400, 10.0.303, 10.0.111. The official release metadata lists 10 CVEs addressed in this release. .NET 10.0 is an LTS release currently in the "active" support phase, with support ending on 2028-11-14. It has since been superseded by .NET 10.0.13.

.NET 8.0.30 released with fixes for 10 CVEs

.NET 8.0.30 was released on 2026-08-11. It ships .NET Runtime 8.0.30, ASP.NET Core Runtime 8.0.30, SDK 8.0.424, 8.0.130. The official release metadata lists 10 CVEs addressed in this release. .NET 8.0 is an LTS release currently in the "maintenance" support phase, with support ending on 2026-11-10. It has since been superseded by .NET 8.0.32.

.NET 9.0.19 released with fixes for 10 CVEs

.NET 9.0.19 was released on 2026-08-11. It ships .NET Runtime 9.0.19, ASP.NET Core Runtime 9.0.19, SDK 9.0.317, 9.0.120. The official release metadata lists 10 CVEs addressed in this release. .NET 9.0 is an STS release currently in the "maintenance" support phase, with support ending on 2026-11-10. It has since been superseded by .NET 9.0.21.

.NET 10.0.10 released with fixes for 17 CVEs

.NET 10.0.10 was released on 2026-07-14. It ships .NET Runtime 10.0.10, ASP.NET Core Runtime 10.0.10, SDK 10.0.302, 10.0.110. The official release metadata lists 17 CVEs addressed in this release. .NET 10.0 is an LTS release currently in the "active" support phase, with support ending on 2028-11-14. It has since been superseded by .NET 10.0.13.

.NET 8.0.29 released with fixes for 17 CVEs

.NET 8.0.29 was released on 2026-07-14. It ships .NET Runtime 8.0.29, ASP.NET Core Runtime 8.0.29, SDK 8.0.423, 8.0.129. The official release metadata lists 17 CVEs addressed in this release. .NET 8.0 is an LTS release currently in the "maintenance" support phase, with support ending on 2026-11-10. It has since been superseded by .NET 8.0.32.

.NET 9.0.18 released with fixes for 17 CVEs

.NET 9.0.18 was released on 2026-07-14. It ships .NET Runtime 9.0.18, ASP.NET Core Runtime 9.0.18, SDK 9.0.316, 9.0.119. The official release metadata lists 17 CVEs addressed in this release. .NET 9.0 is an STS release currently in the "maintenance" support phase, with support ending on 2026-11-10. It has since been superseded by .NET 9.0.21.

Aspire 13.4.5 is now available

The dotnet/aspire repository published v13.4.5 on 2026-06-17. The release notes list changes including: 🛡️ Bumped StreamJsonRpc to 2.25.29 to clear the MessagePack GHSA-hv8m-jj95-wg3x (CVE-2026-48109) NU1903 advisory — The transitive MessagePack 2.5.192…; 🎭 playwrightCliVersion values that are not valid SemVer 2.0 now fail fast….

.NET 10.0.9 released with fixes for 3 CVEs

.NET 10.0.9 was released on 2026-06-09. It ships .NET Runtime 10.0.9, ASP.NET Core Runtime 10.0.9, SDK 10.0.301, 10.0.109. The official release metadata lists 3 CVEs addressed in this release. .NET 10.0 is an LTS release currently in the "active" support phase, with support ending on 2028-11-14. It has since been superseded by .NET 10.0.13.

.NET 8.0.28 released with fixes for 3 CVEs

.NET 8.0.28 was released on 2026-06-09. It ships .NET Runtime 8.0.28, ASP.NET Core Runtime 8.0.28, SDK 8.0.422, 8.0.128. The official release metadata lists 3 CVEs addressed in this release. .NET 8.0 is an LTS release currently in the "maintenance" support phase, with support ending on 2026-11-10. It has since been superseded by .NET 8.0.32.