--- id: "CVE-2026-70188" kind: "vulnerability" aliases: ["CVE-2026-70188", "GHSA-fpq8-4vhr-rcxx"] title: "Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability" severity: "critical" cvss: 9.100000381469727 epss: 0.008270000107586384 exploited: false status: "open" category: "runtime" products: [{"name": "Microsoft.AspNetCore.App.Runtime.linux-arm", "fixed": ["11.0.0-rc.2"], "affected": ">= 11.0.0-preview.1, <= 11.0.0-rc.1", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-arm64", "fixed": ["11.0.0-rc.2"], "affected": ">= 11.0.0-preview.1, <= 11.0.0-rc.1", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm", "fixed": ["11.0.0-rc.2"], "affected": ">= 11.0.0-preview.1, <= 11.0.0-rc.1", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64", "fixed": ["11.0.0-rc.2"], "affected": ">= 11.0.0-preview.1, <= 11.0.0-rc.1", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-musl-x64", "fixed": ["11.0.0-rc.2"], "affected": ">= 11.0.0-preview.1, <= 11.0.0-rc.1", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-x64", "fixed": ["11.0.0-rc.2"], "affected": ">= 11.0.0-preview.1, <= 11.0.0-rc.1", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.osx-arm64", "fixed": ["11.0.0-rc.2"], "affected": ">= 11.0.0-preview.1, <= 11.0.0-rc.1", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.osx-x64", "fixed": ["11.0.0-rc.2"], "affected": ">= 11.0.0-preview.1, <= 11.0.0-rc.1", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.win-arm64", "fixed": ["11.0.0-rc.2"], "affected": ">= 11.0.0-preview.1, <= 11.0.0-rc.1", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.win-x64", "fixed": ["11.0.0-rc.2"], "affected": ">= 11.0.0-preview.1, <= 11.0.0-rc.1", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.win-x86", "fixed": ["11.0.0-rc.2"], "affected": ">= 11.0.0-preview.1, <= 11.0.0-rc.1", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-arm", "fixed": ["8.0.32"], "affected": ">= 8.0.0, <= 8.0.31", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-arm64", "fixed": ["8.0.32"], "affected": ">= 8.0.0, <= 8.0.31", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm", "fixed": ["8.0.32"], "affected": ">= 8.0.0, <= 8.0.31", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64", "fixed": ["8.0.32"], "affected": ">= 8.0.0, <= 8.0.31", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-musl-x64", "fixed": ["8.0.32"], "affected": ">= 8.0.0, <= 8.0.31", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-x64", "fixed": ["8.0.32"], "affected": ">= 8.0.0, <= 8.0.31", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.osx-arm64", "fixed": ["8.0.32"], "affected": ">= 8.0.0, <= 8.0.31", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.osx-x64", "fixed": ["8.0.32"], "affected": ">= 8.0.0, <= 8.0.31", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.win-arm64", "fixed": ["8.0.32"], "affected": ">= 8.0.0, <= 8.0.31", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.win-x64", "fixed": ["8.0.32"], "affected": ">= 8.0.0, <= 8.0.31", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.win-x86", "fixed": ["8.0.32"], "affected": ">= 8.0.0, <= 8.0.31", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-arm", "fixed": ["10.0.13"], "affected": ">= 10.0.0, <= 10.0.12", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-arm64", "fixed": ["10.0.13"], "affected": ">= 10.0.0, <= 10.0.12", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm", "fixed": ["10.0.13"], "affected": ">= 10.0.0, <= 10.0.12", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64", "fixed": ["10.0.13"], "affected": ">= 10.0.0, <= 10.0.12", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-musl-x64", "fixed": ["10.0.13"], "affected": ">= 10.0.0, <= 10.0.12", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-x64", "fixed": ["10.0.13"], "affected": ">= 10.0.0, <= 10.0.12", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.osx-arm64", "fixed": ["10.0.13"], "affected": ">= 10.0.0, <= 10.0.12", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.osx-x64", "fixed": ["10.0.13"], "affected": ">= 10.0.0, <= 10.0.12", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.win-arm64", "fixed": ["10.0.13"], "affected": ">= 10.0.0, <= 10.0.12", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.win-x64", "fixed": ["10.0.13"], "affected": ">= 10.0.0, <= 10.0.12", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.win-x86", "fixed": ["10.0.13"], "affected": ">= 10.0.0, <= 10.0.12", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-arm", "fixed": ["9.0.21"], "affected": ">= 9.0.0, <= 9.0.20", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-arm64", "fixed": ["9.0.21"], "affected": ">= 9.0.0, <= 9.0.20", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm", "fixed": ["9.0.21"], "affected": ">= 9.0.0, <= 9.0.20", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64", "fixed": ["9.0.21"], "affected": ">= 9.0.0, <= 9.0.20", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-musl-x64", "fixed": ["9.0.21"], "affected": ">= 9.0.0, <= 9.0.20", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.linux-x64", "fixed": ["9.0.21"], "affected": ">= 9.0.0, <= 9.0.20", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.osx-arm64", "fixed": ["9.0.21"], "affected": ">= 9.0.0, <= 9.0.20", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.osx-x64", "fixed": ["9.0.21"], "affected": ">= 9.0.0, <= 9.0.20", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.win-arm64", "fixed": ["9.0.21"], "affected": ">= 9.0.0, <= 9.0.20", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.win-x64", "fixed": ["9.0.21"], "affected": ">= 9.0.0, <= 9.0.20", "ecosystem": "nuget"}, {"name": "Microsoft.AspNetCore.App.Runtime.win-x86", "fixed": ["9.0.21"], "affected": ">= 9.0.0, <= 9.0.20", "ecosystem": "nuget"}] ecosystems: ["nuget"] tags: ["asp.net-core", "cwe-444", "dotnet", "http2", "kestrel", "runtime", "self-hosted"] not_affected_if: ["default-config", "managed-hosting", "non-http2-only-deployments"] published_at: "2026-10-13T19:19:33+00:00" first_seen_at: "2026-10-23T19:11:32+00:00" updated_at: "2026-10-23T23:44:52+00:00" sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-fpq8-4vhr-rcxx", "first_seen_at": "2026-10-23T19:11:32+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70188", "first_seen_at": "2026-10-23T23:44:52+00:00"}] --- # Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability ASP.NET Core's Kestrel HTTP server accepts newline characters in HTTP/2 request trailers and HPACK dynamic-table values instead of rejecting them as malformed, enabling HTTP request smuggling (CWE-444). An unauthenticated remote attacker can use this to desynchronize request handling and gain high confidentiality and integrity impact. _Summary, check and fix written by a model from the sources; labelled as such._ ## Affected - nuget:Microsoft.AspNetCore.App.Runtime.linux-arm affected >= 11.0.0-preview.1, <= 11.0.0-rc.1 fixed 11.0.0-rc.2 - nuget:Microsoft.AspNetCore.App.Runtime.linux-arm64 affected >= 11.0.0-preview.1, <= 11.0.0-rc.1 fixed 11.0.0-rc.2 - nuget:Microsoft.AspNetCore.App.Runtime.linux-musl-arm affected >= 11.0.0-preview.1, <= 11.0.0-rc.1 fixed 11.0.0-rc.2 - nuget:Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 affected >= 11.0.0-preview.1, <= 11.0.0-rc.1 fixed 11.0.0-rc.2 - nuget:Microsoft.AspNetCore.App.Runtime.linux-musl-x64 affected >= 11.0.0-preview.1, <= 11.0.0-rc.1 fixed 11.0.0-rc.2 - nuget:Microsoft.AspNetCore.App.Runtime.linux-x64 affected >= 11.0.0-preview.1, <= 11.0.0-rc.1 fixed 11.0.0-rc.2 - nuget:Microsoft.AspNetCore.App.Runtime.osx-arm64 affected >= 11.0.0-preview.1, <= 11.0.0-rc.1 fixed 11.0.0-rc.2 - nuget:Microsoft.AspNetCore.App.Runtime.osx-x64 affected >= 11.0.0-preview.1, <= 11.0.0-rc.1 fixed 11.0.0-rc.2 - nuget:Microsoft.AspNetCore.App.Runtime.win-arm64 affected >= 11.0.0-preview.1, <= 11.0.0-rc.1 fixed 11.0.0-rc.2 - nuget:Microsoft.AspNetCore.App.Runtime.win-x64 affected >= 11.0.0-preview.1, <= 11.0.0-rc.1 fixed 11.0.0-rc.2 - nuget:Microsoft.AspNetCore.App.Runtime.win-x86 affected >= 11.0.0-preview.1, <= 11.0.0-rc.1 fixed 11.0.0-rc.2 - nuget:Microsoft.AspNetCore.App.Runtime.linux-arm affected >= 8.0.0, <= 8.0.31 fixed 8.0.32 - nuget:Microsoft.AspNetCore.App.Runtime.linux-arm64 affected >= 8.0.0, <= 8.0.31 fixed 8.0.32 - nuget:Microsoft.AspNetCore.App.Runtime.linux-musl-arm affected >= 8.0.0, <= 8.0.31 fixed 8.0.32 - nuget:Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 affected >= 8.0.0, <= 8.0.31 fixed 8.0.32 - nuget:Microsoft.AspNetCore.App.Runtime.linux-musl-x64 affected >= 8.0.0, <= 8.0.31 fixed 8.0.32 - nuget:Microsoft.AspNetCore.App.Runtime.linux-x64 affected >= 8.0.0, <= 8.0.31 fixed 8.0.32 - nuget:Microsoft.AspNetCore.App.Runtime.osx-arm64 affected >= 8.0.0, <= 8.0.31 fixed 8.0.32 - nuget:Microsoft.AspNetCore.App.Runtime.osx-x64 affected >= 8.0.0, <= 8.0.31 fixed 8.0.32 - nuget:Microsoft.AspNetCore.App.Runtime.win-arm64 affected >= 8.0.0, <= 8.0.31 fixed 8.0.32 - nuget:Microsoft.AspNetCore.App.Runtime.win-x64 affected >= 8.0.0, <= 8.0.31 fixed 8.0.32 - nuget:Microsoft.AspNetCore.App.Runtime.win-x86 affected >= 8.0.0, <= 8.0.31 fixed 8.0.32 - nuget:Microsoft.AspNetCore.App.Runtime.linux-arm affected >= 10.0.0, <= 10.0.12 fixed 10.0.13 - nuget:Microsoft.AspNetCore.App.Runtime.linux-arm64 affected >= 10.0.0, <= 10.0.12 fixed 10.0.13 - nuget:Microsoft.AspNetCore.App.Runtime.linux-musl-arm affected >= 10.0.0, <= 10.0.12 fixed 10.0.13 - nuget:Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 affected >= 10.0.0, <= 10.0.12 fixed 10.0.13 - nuget:Microsoft.AspNetCore.App.Runtime.linux-musl-x64 affected >= 10.0.0, <= 10.0.12 fixed 10.0.13 - nuget:Microsoft.AspNetCore.App.Runtime.linux-x64 affected >= 10.0.0, <= 10.0.12 fixed 10.0.13 - nuget:Microsoft.AspNetCore.App.Runtime.osx-arm64 affected >= 10.0.0, <= 10.0.12 fixed 10.0.13 - nuget:Microsoft.AspNetCore.App.Runtime.osx-x64 affected >= 10.0.0, <= 10.0.12 fixed 10.0.13 - nuget:Microsoft.AspNetCore.App.Runtime.win-arm64 affected >= 10.0.0, <= 10.0.12 fixed 10.0.13 - nuget:Microsoft.AspNetCore.App.Runtime.win-x64 affected >= 10.0.0, <= 10.0.12 fixed 10.0.13 - nuget:Microsoft.AspNetCore.App.Runtime.win-x86 affected >= 10.0.0, <= 10.0.12 fixed 10.0.13 - nuget:Microsoft.AspNetCore.App.Runtime.linux-arm affected >= 9.0.0, <= 9.0.20 fixed 9.0.21 - nuget:Microsoft.AspNetCore.App.Runtime.linux-arm64 affected >= 9.0.0, <= 9.0.20 fixed 9.0.21 - nuget:Microsoft.AspNetCore.App.Runtime.linux-musl-arm affected >= 9.0.0, <= 9.0.20 fixed 9.0.21 - nuget:Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 affected >= 9.0.0, <= 9.0.20 fixed 9.0.21 - nuget:Microsoft.AspNetCore.App.Runtime.linux-musl-x64 affected >= 9.0.0, <= 9.0.20 fixed 9.0.21 - nuget:Microsoft.AspNetCore.App.Runtime.linux-x64 affected >= 9.0.0, <= 9.0.20 fixed 9.0.21 - nuget:Microsoft.AspNetCore.App.Runtime.osx-arm64 affected >= 9.0.0, <= 9.0.20 fixed 9.0.21 - nuget:Microsoft.AspNetCore.App.Runtime.osx-x64 affected >= 9.0.0, <= 9.0.20 fixed 9.0.21 - nuget:Microsoft.AspNetCore.App.Runtime.win-arm64 affected >= 9.0.0, <= 9.0.20 fixed 9.0.21 - nuget:Microsoft.AspNetCore.App.Runtime.win-x64 affected >= 9.0.0, <= 9.0.20 fixed 9.0.21 - nuget:Microsoft.AspNetCore.App.Runtime.win-x86 affected >= 9.0.0, <= 9.0.20 fixed 9.0.21 ## How to check Run dotnet --list-runtimes and dotnet --info to see installed runtime versions; compare the Microsoft.AspNetCore.App.Runtime.* package versions in your projects against the affected ranges. Check project files and packages.lock.json for Microsoft.AspNetCore.App.Runtime.* references at 11.0.0-preview.1 through 11.0.0-rc.1, 10.0.0 through 10.0.12, 9.0.0 through 9.0.20, or 8.0.0 through 8.0.31. ## Fix Update to the patched runtime: 11.0.0-rc.2, 10.0.13, 9.0.21, or 8.0.32, and install the latest .NET; recompile and redeploy self-contained apps and restart services after updating. For the 8.0 line, the advisory lists 8.0.32 as the fix; note the 8.0 range is listed on the affected rows only for linux-arm in the source table. ## Timeline - 2026-10-23T19:11:32+00:00 ghsa https://github.com/advisories/GHSA-fpq8-4vhr-rcxx - 2026-10-23T23:44:52+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-70188 ## From the sources ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Kestrel accepts newline characters in HTTP/2 request trailers and values retrieved from the dynamic HPACK table instead of treating them as malformed. ## Announcement Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/462 ## CVSS Details - **Version:** 3.1 - **Severity:** Critical - **Score:** 9.1 - **Vector:** `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N` - **Weakness:** CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')) ## Affected Platforms - **Platforms:** Windows, Linux, macOS - **Architectures:** All ## Affected Packages The vulnerability affects Microsoft .NET projects that use an affected package version listed below. Package name | Affected version | Patched version ------------ | ---------------- | --------------- [Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm) | >= 11.0.0-preview.1, <= 11.0.0-rc.1 | 11.0.0-rc.2 [Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64) | >= 11.0.0-preview.1, <= 11.0.0-rc.1 | 11.0.0-rc.2 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm) | >= 11.0.0-preview.1, <= 11.0.0-rc.1 | 11.0.0-rc.2 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64) | >= 11.0.0-preview.1, <= 11.0.0-rc.1 | 11.0.0-rc.2 [Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64) | >= 11.0.0-preview.1, <= 11.0.0-rc.1 | 11.0.0-rc.2 [Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64) | >= 11.0.0-preview.1, <= 11.0.0-rc.1 | 11.0.0-rc.2 [Microsoft.AspNetCore.App.Runtime.osx-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-arm64) | >= 11.0.0-preview.1, <= 11.0.0-rc.1 | 11.0.0-rc.2 [Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64) | >= 11.0.0-preview.1, <= 11.0.0-rc.1 | 11.0.0-rc.2 [Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm) | >= 11.0.0-preview.1, <= 11.0.0-rc.1 | 11.0.0-rc.2 [Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64) | >= 11.0.0-preview.1, <= 11.0.0-rc.1 | 11.0.0-rc.2 [Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64) | >= 11.0.0-preview.1, <= 11.0.0-rc.1 | 11.0.0-rc.2 [Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86) | >= 11.0.0-preview.1, <= 11.0.0-rc.1 | 11.0.0-rc.2 [Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm) | >= 8.0.0, <= 8.0.31 | 8.0.32 [Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64) | >= 8.0.0, <= 8.0.31 | 8.0.32 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm) | >= 8.0.0, <= 8.0.31 | 8.0.32 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64) | >= 8.0.0, <= 8.0.31 | 8.0.32 [Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64) | >= 8.0.0, <= 8.0.31 | 8.0.32 [Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64) | >= 8.0.0, <= 8.0.31 | 8.0.32 [Microsoft.AspNetCore.App.Runtime.osx-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-arm64) | >= 8.0.0, <= 8.0.31 | 8.0.32 [Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64) | >= 8.0.0, <= 8.0.31 | 8.0.32 [Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm) | >= 8.0.0, <= 8.0.31 | 8.0.32 [Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64) | >= 8.0.0, <= 8.0.31 | 8.0.32 [Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64) | >= 8.0.0, <= 8.0.31 | 8.0.32 [Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86) | >= 8.0.0, <= 8.0.31 | 8.0.32 [Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm) | >= 10.0.0, <= 10.0.12 | 10.0.13 [Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64) | >= 10.0.0, <= 10.0.12 | 10.0.13 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm) | >= 10.0.0, <= 10.0.12 | 10.0.13 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64) | >= 10.0.0, <= 10.0.12 | 10.0.13 [Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64) | >= 10.0.0, <= 10.0.12 | 10.0.13 [Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64) | >= 10.0.0, <= 10.0.12 | 10.0.13 [Microsoft.AspNetCore.App.Runtime.osx-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-arm64) | >= 10.0.0, <= 10.0.12 | 10.0.13 [Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64) | >= 10.0.0, <= 10.0.12 | 10.0.13 [Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm) | >= 10.0.0, <= 10.0.12 | 10.0.13 [Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64) | >= 10.0.0, <= 10.0.12 | 10.0.13 [Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64) | >= 10.0.0, <= 10.0.12 | 10.0.13 [Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86) | >= 10.0.0, <= 10.0.12 | 10.0.13 [Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm) | >= 9.0.0, <= 9.0.20 | 9.0.21 [Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64) | >= 9.0.0, <= 9.0.20 | 9.0.21 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm) | >= 9.0.0, <= 9.0.20 | 9.0.21 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64) | >= 9.0.0, <= 9.0.20 | 9.0.21 [Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64) | >= 9.0.0, <= 9.0.20 | 9.0.21 [Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64) | >= 9.0.0, <= 9.0.20 | 9.0.21 [Microsoft.AspNetCore.App.Runtime.osx-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-arm64) | >= 9.0. --- _Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_