Known vulnerabilities and malicious package reports for Microsoft.AspNetCore.Components.WebAssembly.Server on NuGet, live from OSV, with CISA KEV exploitation status and EPSS scores.
0 malicious package reports and 2 vulnerabilities returned by OSV. Check a specific version to see which reports apply.
Microsoft Security Advisory CVE-2026-96230 - ASP.NET Core Remote Code Execution Vulnerability
Published .
Updated .
Affected ranges: introduced 10.0.0, fixed 10.0.13; introduced 11.0.0-preview.1, fixed 11.0.0-rc.2; introduced 8.0.0, fixed 8.0.32; introduced 9.0.0, fixed 9.0.21.
Fix versions reported by the advisory: 10.0.13, 11.0.0-rc.2, 8.0.32, 9.0.21.
Severity: HIGH.
Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability
Published .
Updated .
Reported affected releases: 10.0.0, 10.0.1, 10.0.10, 10.0.11, 10.0.12, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9.
Affected ranges: introduced 10.0.0, fixed 10.0.13; introduced 11.0.0-preview.1, fixed 11.0.0-rc.2.26478.115.
Fix versions reported by the advisory: 10.0.13, 11.0.0-rc.2.26478.115.
Severity: HIGH.
Source: OSV, including OpenSSF malicious-package reports and GitHub advisories. No known report is not proof a package is safe.