Microsoft.AspNetCore.SignalR.Common (NuGet)

Known vulnerabilities and malicious package reports for Microsoft.AspNetCore.SignalR.Common on NuGet, live from OSV, with CISA KEV exploitation status and EPSS scores.

Known package reports

0 malicious package reports and 1 vulnerability returned by OSV. Check a specific version to see which reports apply.

GHSA-334f-vvp4-7g6p: Vulnerability

Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service Vulnerability

Published .

Updated .

Affected ranges: introduced 10.0.0, fixed 10.0.13; introduced 11.0.0-preview.5, fixed 11.0.0-rc.2; introduced 8.0.0, fixed 8.0.32; introduced 9.0.0, fixed 9.0.21.

Fix versions reported by the advisory: 10.0.13, 11.0.0-rc.2, 8.0.32, 9.0.21.

Severity: HIGH.

CVE-2026-70159

Source: OSV, including OpenSSF malicious-package reports and GitHub advisories. No known report is not proof a package is safe.