MICROSOFT.ASPNETCORE.APP.RUNTIME.LINUX-ARM · GHSA-c827-j3xf-67v6 · Package
NO FIX YET
This advisory is withdrawn as a duplicate of GHSA-8w29-6cjc-h6w4. The original text says improper input validation in ASP.NET Core lets an unauthenticated attacker bypass a security feature over the network.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
The sources describe an input validation flaw in ASP.NET Core that can be reached over the network, with the affected package listed as the Linux ARM runtime for versions 11.0.0-preview.7.26381.103 through 11.0.0-rc.3.26522.148. This advisory was withdrawn as a duplicate, so the sources do not say which applications are exposed beyond that. Teams should follow GHSA-8w29-6cjc-h6w4 for the actual scope.
Who cares aspnet-core, dotnet, linux-arm
Microsoft.AspNetCore.App.Runtime.linux-arm at a version in the affected range (11.0.0-preview.7.26381.103 to 11.0.0-rc.3.26522.148)No fix yet, per the sources.
This advisory has been withdrawn because it is a duplicate of GHSA-8w29-6cjc-h6w4. This link is maintained to preserve external references.
Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
This page as .md · .json · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
GitHub Advisory Database, CC-BY 4.0. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.