--- id: "GHSA-p3jp-9v83-76w9" kind: "vulnerability" aliases: ["GHSA-p3jp-9v83-76w9"] title: "Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability" severity: "high" cvss: 8.1 epss: null exploited: false status: "open" category: "runtime" products: [{"name": "Microsoft.DotNet.ILCompiler", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-arm", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-x86", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.browser-wasm", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.ios-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.linux-arm", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.linux-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.linux-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasm", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.osx-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.osx-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.tvos-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.wasi-wasm", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.win-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.win-x86", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-arm", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-bionic-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-bionic-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-musl-arm", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-musl-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-musl-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.osx-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.osx-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.win-arm64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.win-x64", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.win-x86", "fixed": ["8.0.33"], "affected": ">= 8.0.0, < 8.0.33", "ecosystem": "nuget"}, {"name": "Microsoft.DotNet.ILCompiler", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.win-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.win-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.win-x86", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-arm", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-x86", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.browser-wasm", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.ios-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasm", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.tvos-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.wasi-wasm", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-arm", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-bionic-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-bionic-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-musl-arm", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-musl-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-musl-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.osx-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.osx-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.win-arm64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.win-x64", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.win-x86", "fixed": ["9.0.22"], "affected": ">= 9.0.0, < 9.0.22", "ecosystem": "nuget"}, {"name": "Microsoft.DotNet.ILCompiler", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.android-arm", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.android-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.android-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.win-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.win-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.win-x86", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-arm", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-x86", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.browser-wasm", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.ios-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasm", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.tvos-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.wasi-wasm", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.android-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.android-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-arm", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-bionic-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-bionic-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-musl-arm", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-musl-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-musl-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.osx-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.osx-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.win-arm64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.win-x64", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.win-x86", "fixed": ["10.0.14"], "affected": ">= 10.0.0, < 10.0.14", "ecosystem": "nuget"}, {"name": "Microsoft.DotNet.ILCompiler", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.android-arm", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.android-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.android-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.linux-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.win-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.win-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.NativeAOT.win-x86", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-arm", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.android-x86", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.browser-wasm", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.ios-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasm", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.tvos-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.Mono.wasi-wasm", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.android-arm", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.android-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.android-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.browser-wasm", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.ios-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.iossimulator-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.iossimulator-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-arm", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-bionic-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-bionic-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-musl-arm", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-musl-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-musl-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.linux-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.maccatalyst-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.maccatalyst-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.osx-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.osx-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.tvos-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.tvossimulator-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.tvossimulator-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.win-arm64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.win-x64", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}, {"name": "Microsoft.NETCore.App.Runtime.win-x86", "fixed": ["11.0.0-rc.3.26522.148"], "affected": ">= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148", "ecosystem": "nuget"}] ecosystems: ["nuget"] tags: ["asp.net-core", "cwe-787", "dotnet", "httpclient", "nativeaot", "runtime"] not_affected_if: ["default-config", "dotnet-framework", "no-brotli-decompression"] published_at: "2026-11-03T17:33:48+00:00" first_seen_at: "2026-11-03T17:36:46+00:00" updated_at: "2026-11-03T17:38:32+00:00" sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-p3jp-9v83-76w9", "first_seen_at": "2026-11-03T17:36:46+00:00"}] --- # Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability A buffer overflow in the Brotli decompression library used by .NET lets an unauthenticated attacker read or corrupt process memory. The sources say this can lead to information disclosure, denial of service, or privilege elevation. _Summary, check and fix written by a model from the sources; labelled as such._ ## Affected - nuget:Microsoft.DotNet.ILCompiler affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-arm affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-x86 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.browser-wasm affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.ios-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.linux-arm affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.linux-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.linux-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasm affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.osx-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.osx-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.wasi-wasm affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.win-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.Mono.win-x86 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.linux-arm affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.linux-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.linux-bionic-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.linux-bionic-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.linux-musl-arm affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.linux-musl-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.linux-musl-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.linux-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.osx-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.osx-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.win-arm64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.win-x64 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.NETCore.App.Runtime.win-x86 affected >= 8.0.0, < 8.0.33 fixed 8.0.33 - nuget:Microsoft.DotNet.ILCompiler affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.win-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.win-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.win-x86 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-arm affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-x86 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.browser-wasm affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.ios-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasm affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.Mono.wasi-wasm affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.linux-arm affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.linux-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.linux-bionic-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.linux-bionic-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.linux-musl-arm affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.linux-musl-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.linux-musl-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.linux-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.osx-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.osx-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.win-arm64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.win-x64 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.NETCore.App.Runtime.win-x86 affected >= 9.0.0, < 9.0.22 fixed 9.0.22 - nuget:Microsoft.DotNet.ILCompiler affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.android-arm affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.android-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.android-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.win-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.win-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.win-x86 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-arm affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-x86 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.browser-wasm affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.ios-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasm affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.Mono.wasi-wasm affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.android-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.android-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.linux-arm affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.linux-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.linux-bionic-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.linux-bionic-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.linux-musl-arm affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.linux-musl-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.linux-musl-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.linux-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.osx-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.osx-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.win-arm64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.win-x64 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.NETCore.App.Runtime.win-x86 affected >= 10.0.0, < 10.0.14 fixed 10.0.14 - nuget:Microsoft.DotNet.ILCompiler affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.android-arm affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.android-arm64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.android-x64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-arm64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-arm64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-musl-x64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.linux-x64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.win-arm64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.win-x64 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.NativeAOT.win-x86 affected >= 11.0.0-preview.1.26104.118, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-arm affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-x64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.android-x86 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.browser-wasm affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.ios-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.multithread.browser-wasm affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.Mono.wasi-wasm affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.android-arm affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.android-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.android-x64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.browser-wasm affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.ios-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.iossimulator-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.iossimulator-x64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.linux-arm affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.linux-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.linux-bionic-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.linux-bionic-x64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.linux-musl-arm affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.linux-musl-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.linux-musl-x64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.linux-x64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.maccatalyst-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.maccatalyst-x64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.osx-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.osx-x64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.tvos-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.tvossimulator-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.tvossimulator-x64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.win-arm64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.win-x64 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 - nuget:Microsoft.NETCore.App.Runtime.win-x86 affected >= 11.0.0-preview.1, < 11.0.0-rc.3.26522.148 fixed 11.0.0-rc.3.26522.148 ## How to check - Run `dotnet --list-runtimes` and check whether any runtime is below `8.0.33` for .NET 8. - Search project files and lockfiles for `Microsoft.NETCore.App.Runtime` and `Microsoft.DotNet.ILCompiler` package references below `8.0.33`. - Check whether ASP.NET Core request decompression (`AddRequestDecompression`) or HttpClient `AutomaticDecompression` includes Brotli, or whether code calls `BrotliStream` or `BrotliDecoder` on untrusted input. ## Fix - .NET 8: move to `8.0.33` or later for the affected runtime and NativeAOT packages. ## Timeline - 2026-11-03T17:36:46+00:00 ghsa https://github.com/advisories/GHSA-p3jp-9v83-76w9 ## Documents - [advisory] Maintainer's advisory: api.github.com https://api.github.com/repos/dotnet/runtime/security-advisories/GHSA-p3jp-9v83-76w9 - [advisory] Maintainer's advisory: github.com https://github.com/dotnet/runtime/security/advisories/GHSA-p3jp-9v83-76w9 - [fix] Patch: github.com https://github.com/dotnet/runtime/pull/136471 - [fix] Patch: github.com https://github.com/dotnet/runtime/commit/f3d8b2f230bc7c9899df6eef2d41e2748107cffa ## From the sources ## Executive summary A buffer overflow vulnerability exists in the Brotli decompression library used by .NET. This vulnerability may allow an unauthenticated attacker to read or corrupt process memory. This could lead to information disclosure, denial of service, or elevation of privilege. ASP.NET Core and HttpClient do not automatically decompress Brotli data in their default configurations. Applications are exposed when they enable Brotli decompression or explicitly use Brotli decompression APIs to process attacker-controlled data, as described below. .NET Framework is not affected. ## Announcement Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/494 ## CVSS Details - **Version:** 3.1 - **Severity:** High - **Score:** 8.1 - **Vector:** `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C` - **Weakness:** CWE-787 (Out-of-bounds Write) ## Affected Platforms - **Platforms:** All - **Architectures:** All ## Mitigations ASP.NET Core request decompression and HttpClient automatic response decompression are not enabled by default. An application is not exposed merely because an affected .NET package is installed. Exposure requires the application to decompress attacker-controlled Brotli data through one of these paths: - Enable ASP.NET Core [automatic request decompression](https://learn.microsoft.com/aspnet/core/fundamentals/middleware/request-decompression) with Brotli (`br`) support. - Enable HttpClient automatic response decompression by configuring [HttpClientHandler.AutomaticDecompression](https://learn.microsoft.com/dotnet/api/system.net.http.httpclienthandler.automaticdecompression) or [SocketsHttpHandler.AutomaticDecompression](https://learn.microsoft.com/dotnet/api/system.net.http.socketshttphandler.automaticdecompression) to include [DecompressionMethods.Brotli](https://learn.microsoft.com/dotnet/api/system.net.decompressionmethods) or `DecompressionMethods.All`. - Explicitly use Brotli decompression APIs in `System.IO.Compression`, such as `BrotliStream` or `BrotliDecoder`. Until the update can be deployed, avoid decompressing attacker-controlled Brotli data. The following examples show how to disable Brotli decompression if you are already using it. > **Warning: Do not use these code snippets if you are not already using decompression.** Do not introduce a call to `AddRequestDecompression` if your application does not already call it. Similarly, do not introduce an `AutomaticDecompression` property assignment if your application does not already set that property. Modify only your existing decompression configuration. Enabling automatic decompression can introduce denial-of-service risks even when Brotli is excluded. If you are already using Brotli request decompression in ASP.NET Core, exclude it by removing the `br` entry from your existing decompression configuration. This retains the default gzip and deflate providers: ```csharp builder.Services.AddRequestDecompression(options => { options.DecompressionProviders.Remove("br"); }); ``` If your application already enables HttpClient automatic response decompression, disable Brotli by updating the flags on your existing handler so they do not include `DecompressionMethods.Brotli`: ```csharp var handler = new HttpClientHandler { AutomaticDecompression = DecompressionMethods.GZip | DecompressionMethods.Deflate }; var httpClient = new HttpClient(handler); ``` Applications that directly use Brotli decompression APIs must stop passing untrusted Brotli data to those APIs until updated. Ensure that other application code does not continue to decompress the same untrusted Brotli data. These changes can affect normal request and response handling and should be tested before deployment. Installing the security update remains the recommended fix. ## Affected Packages The vulnerability affects .NET applications using an affected Brotli decoder in the runtime or NativeAOT packages listed below. ### .NET 8 Package name | Affected version | Patched version ------------ | ---------------- | --------------- [Microsoft.DotNet.ILCompiler](https://www.nuget.org/packages/Microsoft.DotNet.ILCompiler) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.NativeAOT.ios-arm64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-arm64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.NativeAOT.iossimulator-x64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-arm64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.NativeAOT.linux-bionic-x64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-arm64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.NativeAOT.maccatalyst-x64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.NativeAOT.osx-arm64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.NativeAOT.osx-x64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.NativeAOT.tvos-arm64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-arm64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.NativeAOT.tvossimulator-x64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.Mono.android-arm](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.Mono.android-arm) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.Mono.android-arm64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.Mono.android-arm64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.Mono.android-x64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.Mono.android-x64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.Mono.android-x86](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.Mono.android-x86) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.Mono.browser-wasm](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.Mono.browser-wasm) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.Mono.ios-arm64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.Mono.ios-arm64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64](https://www.nuget.org/packages/Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64) | >= 8.0.0, < 8.0.33 | 8.0.33 [Microsoft.NETCore.App.Runtime.Mono. --- _Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_