{"id":"CVE-2026-114148","aliases":["ALPINE-CVE-2026-114148","ALSA-2026:92420","ALSA-2026:92427","ALSA-2026:92428","ALSA-2026:92429","ALSA-2026:92430","ALSA-2026:92431","ALSA-2026:92432","ALSA-2026:92438","ALSA-2026:92492","ALSA-2026:92511","BELL-CVE-2026-114148","EUVD-2026-113163","RLSA-2026:92420","RLSA-2026:92427","RLSA-2026:92428","RLSA-2026:92429","RLSA-2026:92430","RLSA-2026:92431","RLSA-2026:92432","RLSA-2026:92438","RLSA-2026:92492","RLSA-2026:92511","UBUNTU-CVE-2026-114148","USN-8958-1"],"status":"published","title":"ASP.NET Core Elevation of Privilege Vulnerability","description":"Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00355,"percentile":0.29584,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-276"],"published":"2026-10-26T00:00:00Z","modified":"2026-11-05T11:45:52Z","exploits":[{"source":"pocgithub","id":"Ghost-Bx1/DotNet-Tarball-CVE-2026-114148","title":"Ghost-Bx1/DotNet-Tarball-CVE-2026-114148","date":"2026-10-27","url":"https://github.com/Ghost-Bx1/DotNet-Tarball-CVE-2026-114148"}],"fixes":[{"ecosystem":"Alpine:v3.24","package":"dotnet10-runtime","fixed_in":["10.0.14-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"dotnet8-runtime","fixed_in":["8.0.33-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"dotnet8-runtime","fixed_in":["8.0.33-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"dotnet8-runtime","fixed_in":["8.0.33-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"dotnet9-runtime","fixed_in":["9.0.22-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"dotnet9-runtime","fixed_in":["9.0.22-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"dotnet9-runtime","fixed_in":["9.0.22-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-9.0","fixed_in":["9.0.22-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-dbg-9.0","fixed_in":["9.0.22-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-9.0","fixed_in":["9.0.22-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-9.0","fixed_in":["9.0.22-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-9.0","fixed_in":["9.0.22-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-runtime-9.0","fixed_in":["9.0.22-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-runtime-dbg-9.0","fixed_in":["9.0.22-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-9.0","fixed_in":["9.0.123-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-9.0-source-built-artifacts","fixed_in":["9.0.123-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-aot-9.0","fixed_in":["9.0.123-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-dbg-9.0","fixed_in":["9.0.123-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-9.0","fixed_in":["9.0.22-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-templates-9.0","fixed_in":["9.0.123-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"netstandard-targeting-pack-2.1","fixed_in":["9.0.123-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"aspnetcore-runtime-9.0","fixed_in":["9.0.22-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"aspnetcore-runtime-dbg-9.0","fixed_in":["9.0.22-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"aspnetcore-targeting-pack-9.0","fixed_in":["9.0.22-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-apphost-pack-9.0","fixed_in":["9.0.22-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-hostfxr-9.0","fixed_in":["9.0.22-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-runtime-9.0","fixed_in":["9.0.22-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-runtime-dbg-9.0","fixed_in":["9.0.22-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-sdk-9.0","fixed_in":["9.0.123-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-sdk-9.0-source-built-artifacts","fixed_in":["9.0.123-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-sdk-aot-9.0","fixed_in":["9.0.123-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-sdk-dbg-9.0","fixed_in":["9.0.123-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-targeting-pack-9.0","fixed_in":["9.0.22-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-templates-9.0","fixed_in":["9.0.123-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"netstandard-targeting-pack-2.1","fixed_in":["9.0.123-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"aspnetcore-runtime-9.0","fixed_in":["9.0.22-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"aspnetcore-runtime-dbg-9.0","fixed_in":["9.0.22-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"aspnetcore-targeting-pack-9.0","fixed_in":["9.0.22-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-apphost-pack-9.0","fixed_in":["9.0.22-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-hostfxr-9.0","fixed_in":["9.0.22-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-runtime-9.0","fixed_in":["9.0.22-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-runtime-dbg-9.0","fixed_in":["9.0.22-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-sdk-9.0","fixed_in":["9.0.123-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-sdk-9.0-source-built-artifacts","fixed_in":["9.0.123-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-sdk-aot-9.0","fixed_in":["9.0.123-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-sdk-dbg-9.0","fixed_in":["9.0.123-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-targeting-pack-9.0","fixed_in":["9.0.22-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-templates-9.0","fixed_in":["9.0.123-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"netstandard-targeting-pack-2.1","fixed_in":["9.0.123-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-10.0","fixed_in":["10.0.14-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-dbg-10.0","fixed_in":["10.0.14-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-10.0","fixed_in":["10.0.14-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-10.0","fixed_in":["10.0.14-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-10.0","fixed_in":["10.0.14-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-runtime-10.0","fixed_in":["10.0.14-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-runtime-dbg-10.0","fixed_in":["10.0.14-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-10.0","fixed_in":["10.0.114-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-10.0-source-built-artifacts","fixed_in":["10.0.114-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-aot-10.0","fixed_in":["10.0.114-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-dbg-10.0","fixed_in":["10.0.114-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-10.0","fixed_in":["10.0.14-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-templates-10.0","fixed_in":["10.0.114-1.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"aspnetcore-runtime-10.0","fixed_in":["10.0.14-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"aspnetcore-runtime-dbg-10.0","fixed_in":["10.0.14-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"aspnetcore-targeting-pack-10.0","fixed_in":["10.0.14-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-apphost-pack-10.0","fixed_in":["10.0.14-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-host","fixed_in":["10.0.14-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-hostfxr-10.0","fixed_in":["10.0.14-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-runtime-10.0","fixed_in":["10.0.14-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-runtime-dbg-10.0","fixed_in":["10.0.14-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-sdk-10.0","fixed_in":["10.0.114-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-sdk-10.0-source-built-artifacts","fixed_in":["10.0.114-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-sdk-aot-10.0","fixed_in":["10.0.114-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-sdk-dbg-10.0","fixed_in":["10.0.114-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-targeting-pack-10.0","fixed_in":["10.0.14-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-templates-10.0","fixed_in":["10.0.114-1.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"aspnetcore-runtime-10.0","fixed_in":["10.0.14-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"aspnetcore-runtime-dbg-10.0","fixed_in":["10.0.14-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"aspnetcore-targeting-pack-10.0","fixed_in":["10.0.14-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-apphost-pack-10.0","fixed_in":["10.0.14-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-host","fixed_in":["10.0.14-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-hostfxr-10.0","fixed_in":["10.0.14-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-runtime-10.0","fixed_in":["10.0.14-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-runtime-dbg-10.0","fixed_in":["10.0.14-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-sdk-10.0","fixed_in":["10.0.114-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-sdk-10.0-source-built-artifacts","fixed_in":["10.0.114-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-sdk-aot-10.0","fixed_in":["10.0.114-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-sdk-dbg-10.0","fixed_in":["10.0.114-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-targeting-pack-10.0","fixed_in":["10.0.14-1.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dotnet-templates-10.0","fixed_in":["10.0.114-1.el10_2"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"dotnet8-runtime","fixed_in":["8.0.33-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"dotnet8-runtime","fixed_in":["8.0.33-r0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"dotnet9.0","fixed_in":["0:9.0.123-1.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"dotnet9.0","fixed_in":["0:9.0.123-1.el9_8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"dotnet9.0","fixed_in":["0:9.0.123-1.el10_2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"dotnet10.0","fixed_in":["0:10.0.114-1.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"dotnet10.0","fixed_in":["0:10.0.114-1.el9_8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"dotnet10.0","fixed_in":["0:10.0.114-1.el10_2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"dotnet8","fixed_in":["8.0.133-8.0.33-0ubuntu1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"dotnet10","fixed_in":["10.0.114-10.0.14-0ubuntu1~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"dotnet8","fixed_in":["8.0.133-8.0.33-0ubuntu1~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"dotnet10","fixed_in":["10.0.114-10.0.14-0ubuntu1~26.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"dotnet11","fixed_in":["11.0.100-11.0.0~rc3-0ubuntu1~26.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"dotnet10","fixed_in":["10.0.114-10.0.14-0ubuntu1~26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"dotnet10-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"dotnet8-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"dotnet8-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"dotnet8-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"dotnet9-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"dotnet9-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"dotnet9-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-dbg-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-dbg-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-8.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-dbg-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-templates-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-dbg-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-dbg-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-9.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-aot-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-dbg-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-templates-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"aspnetcore-runtime-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el10_2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"aspnetcore-runtime-dbg-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el10_2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"aspnetcore-targeting-pack-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el10_2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-apphost-pack-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el10_2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-hostfxr-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el10_2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-runtime-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el10_2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-runtime-dbg-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el10_2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-sdk-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-1.el10_2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-sdk-8.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-1.el10_2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-sdk-dbg-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-1.el10_2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-targeting-pack-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el10_2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-templates-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-1.el10_2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"aspnetcore-runtime-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"aspnetcore-runtime-dbg-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"aspnetcore-targeting-pack-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-apphost-pack-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-hostfxr-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-runtime-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-runtime-dbg-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-9.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-aot-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-dbg-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-targeting-pack-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-templates-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"aspnetcore-runtime-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"aspnetcore-runtime-dbg-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"aspnetcore-targeting-pack-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-apphost-pack-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-hostfxr-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-runtime-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-runtime-dbg-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-sdk-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-sdk-9.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-sdk-aot-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-sdk-dbg-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-targeting-pack-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.22-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-templates-9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.123-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-dbg-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-dbg-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-10.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-aot-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-dbg-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-templates-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"aspnetcore-runtime-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"aspnetcore-runtime-dbg-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"aspnetcore-targeting-pack-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-apphost-pack-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-hostfxr-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-runtime-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-runtime-dbg-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-10.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-aot-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-dbg-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-targeting-pack-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-templates-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"aspnetcore-runtime-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"aspnetcore-runtime-dbg-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"aspnetcore-targeting-pack-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-apphost-pack-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-hostfxr-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-runtime-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-runtime-dbg-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-sdk-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-sdk-10.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-sdk-aot-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-sdk-dbg-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-targeting-pack-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.14-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dotnet-templates-10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-1.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"aspnetcore-runtime-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"aspnetcore-runtime-dbg-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"aspnetcore-targeting-pack-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-apphost-pack-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-hostfxr-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-runtime-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-runtime-dbg-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-8.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-dbg-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-targeting-pack-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.33-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-templates-8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-dbg-11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.100~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-dbg-11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.100~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-11.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.100~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-aot-11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.100~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-dbg-11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.100~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.0~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-templates-11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.100~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Alpaquita:25","package":"dotnet8-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.17-r0"},{"fixed":"8.0.33-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"dotnet8-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.11-r1"},{"fixed":"8.0.33-r0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dotnet8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.133-1.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dotnet9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.123-1.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"dotnet8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.133-1.el10_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"dotnet9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.123-1.el9_8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"dotnet9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.0.123-1.el10_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dotnet10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.0.114-1.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"dotnet10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.0.114-1.el9_8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"dotnet10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.0.114-1.el10_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"dotnet8.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.133-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dotnet11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.0.100~rc.3.26522.148-0.12.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dotnet6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.0.108-0ubuntu1~22.04.1","6.0.109-0ubuntu1~22.04.1","6.0.110-0ubuntu1~22.04.1","6.0.111-0ubuntu1~22.04.1","6.0.113-0ubuntu1~22.04.1","6.0.116-0ubuntu1~22.04.1","6.0.118-0ubuntu1~22.04.1","6.0.119-0ubuntu1~22.04.1","6.0.120-0ubuntu1~22.04.1","6.0.121-0ubuntu1~22.04.1","6.0.122-0ubuntu1~22.04.1","6.0.123-0ubuntu1~22.04.1","6.0.124-0ubuntu1~22.04.1","6.0.125-0ubuntu1~22.04.1","6.0.126-0ubuntu1~22.04.1","6.0.127-0ubuntu1~22.04.1","6.0.128-0ubuntu1~22.04.2","6.0.132-0ubuntu1~22.04.1","6.0.133-0ubuntu1~22.04.1","6.0.135-0ubuntu1~22.04.1","6.0.136-0ubuntu1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dotnet7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.105-0ubuntu1~22.04.1","7.0.107-0ubuntu1~22.04.1","7.0.108-0ubuntu1~22.04.1","7.0.109-0ubuntu1~22.04.1","7.0.110-0ubuntu1~22.04.1","7.0.111-0ubuntu1~22.04.1","7.0.112-0ubuntu1~22.04.1","7.0.113-0ubuntu1~22.04.1","7.0.114-0ubuntu1~22.04.1","7.0.115-0ubuntu1~22.04.1","7.0.116-0ubuntu1~22.04.1","7.0.117-0ubuntu1~22.04.1","7.0.117-0ubuntu1~22.04.2","7.0.119-0ubuntu1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dotnet8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-8.0.33-0ubuntu1~22.04.1"}]}],"versions":["8.0.102-8.0.2-0ubuntu1~22.04.1","8.0.103-8.0.3-0ubuntu1~22.04.1","8.0.103-8.0.3-0ubuntu1~22.04.2","8.0.105-8.0.5-0ubuntu1~22.04.1","8.0.107-8.0.7-0ubuntu1~22.04.1","8.0.108-8.0.8-0ubuntu1~22.04.1","8.0.110-8.0.10-0ubuntu1~22.04.1","8.0.111-8.0.11-0ubuntu1~22.04.1","8.0.112-8.0.12-0ubuntu1~22.04.1","8.0.114-8.0.14-0ubuntu1~22.04.1","8.0.115-8.0.15-0ubuntu1~22.04.1","8.0.116-8.0.16-0ubuntu1~22.04.1","8.0.117-8.0.17-0ubuntu1~22.04.1","8.0.118-8.0.18-0ubuntu1~22.04.1","8.0.119-8.0.19-0ubuntu1~22.04.1","8.0.120-8.0.20-0ubuntu1~22.04.1","8.0.121-8.0.21-0ubuntu1~22.04.1","8.0.122-8.0.22-0ubuntu1~22.04.1","8.0.123-8.0.23-0ubuntu1~22.04.1","8.0.124-8.0.24-0ubuntu1~22.04.1","8.0.125-8.0.25-0ubuntu1~22.04.1","8.0.126-8.0.26-0ubuntu1~22.04.1","8.0.127-8.0.27-0ubuntu1~22.04.1","8.0.128-8.0.28-0ubuntu1~22.04.1","8.0.129-8.0.29-0ubuntu1~22.04.1","8.0.130-8.0.30-0ubuntu1~22.04.1","8.0.131-8.0.31-0ubuntu1~22.04.1","8.0.132-8.0.32-0ubuntu1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"dotnet10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-10.0.14-0ubuntu1~24.04.1"}]}],"versions":["10.0.100-10.0.0-0ubuntu1~24.04.1","10.0.101-10.0.1-0ubuntu1~24.04.2","10.0.103-10.0.3-0ubuntu1~24.04.1","10.0.104-10.0.4-0ubuntu1~24.04.1","10.0.105-10.0.5-0ubuntu1~24.04.1","10.0.106-10.0.6-0ubuntu1~24.04.1","10.0.107-10.0.7-0ubuntu1~24.04.1","10.0.108-10.0.8-0ubuntu1~24.04.1","10.0.109-10.0.9-0ubuntu1~24.04.1","10.0.110-10.0.10-0ubuntu1~24.04.1","10.0.111-10.0.11-0ubuntu1~24.04.1","10.0.112-10.0.12-0ubuntu1~24.04.1","10.0.113-10.0.13-0ubuntu1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"dotnet8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-8.0.33-0ubuntu1~24.04.1"}]}],"versions":["8.0.100-8.0.0~rc1-0ubuntu1","8.0.100-8.0.0~rc2-0ubuntu1","8.0.100-8.0.0~rc2-0ubuntu2","8.0.100-8.0.0-0ubuntu1","8.0.100-8.0.0-0ubuntu2","8.0.101-8.0.1-0ubuntu1","8.0.101-8.0.1-0ubuntu2","8.0.102-8.0.2-0ubuntu1","8.0.103-8.0.3-0ubuntu2","8.0.103-8.0.3-0ubuntu3","8.0.104-8.0.4-0ubuntu1","8.0.105-8.0.5-0ubuntu1~24.04.1","8.0.107-8.0.7-0ubuntu1~24.04.1","8.0.108-8.0.8-0ubuntu1~24.04.1","8.0.108-8.0.8-0ubuntu1~24.04.2","8.0.110-8.0.10-0ubuntu1~24.04.1","8.0.111-8.0.11-0ubuntu1~24.04.1","8.0.112-8.0.12-0ubuntu1~24.04.1","8.0.114-8.0.14-0ubuntu1~24.04.1","8.0.115-8.0.15-0ubuntu1~24.04.1","8.0.116-8.0.16-0ubuntu1~24.04.1","8.0.117-8.0.17-0ubuntu1~24.04.1","8.0.118-8.0.18-0ubuntu1~24.04.1","8.0.119-8.0.19-0ubuntu1~24.04.1","8.0.120-8.0.20-0ubuntu1~24.04.1","8.0.121-8.0.21-0ubuntu1~24.04.1","8.0.122-8.0.22-0ubuntu1~24.04.1","8.0.123-8.0.23-0ubuntu1~24.04.1","8.0.124-8.0.24-0ubuntu1~24.04.1","8.0.125-8.0.25-0ubuntu1~24.04.1","8.0.126-8.0.26-0ubuntu1~24.04.1","8.0.127-8.0.27-0ubuntu1~24.04.1","8.0.128-8.0.28-0ubuntu1~24.04.1","8.0.129-8.0.29-0ubuntu1~24.04.1","8.0.130-8.0.30-0ubuntu1~24.04.1","8.0.131-8.0.31-0ubuntu1~24.04.1","8.0.132-8.0.32-0ubuntu1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"dotnet10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-10.0.14-0ubuntu1~26.10.1"}]}],"versions":["10.0.105-10.0.5-0ubuntu1","10.0.107-10.0.7-0ubuntu1~26.04.1","10.0.108-10.0.8-0ubuntu1","10.0.109-10.0.9-0ubuntu1","10.0.110-10.0.10-0ubuntu3","10.0.111-10.0.11-0ubuntu1","10.0.112-10.0.12-0ubuntu1","10.0.112-10.0.12-0ubuntu2","10.0.113-10.0.13-0ubuntu1~26.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"dotnet11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.100-11.0.0~rc3-0ubuntu1~26.10.1"}]}],"versions":["11.0.100-11.0.0~rc1-0ubuntu1","11.0.100-11.0.0~rc2-0ubuntu1~26.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"dotnet10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-10.0.14-0ubuntu1~26.04.1"}]}],"versions":["10.0.100-10.0.0~rc1-0ubuntu1","10.0.100-10.0.0~rc2-0ubuntu1","10.0.100-10.0.0-0ubuntu1","10.0.100-10.0.0-0ubuntu2","10.0.101-10.0.1-0ubuntu1","10.0.101-10.0.1-0ubuntu2","10.0.101-10.0.1-0ubuntu3","10.0.102-10.0.2-0ubuntu1","10.0.103-10.0.3-0ubuntu1","10.0.104-10.0.4-0ubuntu1","10.0.105-10.0.5-0ubuntu1","10.0.107-10.0.7-0ubuntu1~26.04.1","10.0.108-10.0.8-0ubuntu1~26.04.1","10.0.109-10.0.9-0ubuntu1~26.04.1","10.0.110-10.0.10-0ubuntu1~26.04.1","10.0.111-10.0.11-0ubuntu1~26.04.1","10.0.112-10.0.12-0ubuntu1~26.04.1","10.0.113-10.0.13-0ubuntu1~26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dotnet8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-8.0.33-0ubuntu1~22.04.1"}]}],"versions":["8.0.102-8.0.2-0ubuntu1~22.04.1","8.0.103-8.0.3-0ubuntu1~22.04.1","8.0.103-8.0.3-0ubuntu1~22.04.2","8.0.105-8.0.5-0ubuntu1~22.04.1","8.0.107-8.0.7-0ubuntu1~22.04.1","8.0.108-8.0.8-0ubuntu1~22.04.1","8.0.110-8.0.10-0ubuntu1~22.04.1","8.0.111-8.0.11-0ubuntu1~22.04.1","8.0.112-8.0.12-0ubuntu1~22.04.1","8.0.114-8.0.14-0ubuntu1~22.04.1","8.0.115-8.0.15-0ubuntu1~22.04.1","8.0.116-8.0.16-0ubuntu1~22.04.1","8.0.117-8.0.17-0ubuntu1~22.04.1","8.0.118-8.0.18-0ubuntu1~22.04.1","8.0.119-8.0.19-0ubuntu1~22.04.1","8.0.120-8.0.20-0ubuntu1~22.04.1","8.0.121-8.0.21-0ubuntu1~22.04.1","8.0.122-8.0.22-0ubuntu1~22.04.1","8.0.123-8.0.23-0ubuntu1~22.04.1","8.0.124-8.0.24-0ubuntu1~22.04.1","8.0.125-8.0.25-0ubuntu1~22.04.1","8.0.126-8.0.26-0ubuntu1~22.04.1","8.0.127-8.0.27-0ubuntu1~22.04.1","8.0.128-8.0.28-0ubuntu1~22.04.1","8.0.129-8.0.29-0ubuntu1~22.04.1","8.0.130-8.0.30-0ubuntu1~22.04.1","8.0.131-8.0.31-0ubuntu1~22.04.1","8.0.132-8.0.32-0ubuntu1~22.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"dotnet10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-10.0.14-0ubuntu1~24.04.1"}]}],"versions":["10.0.100-10.0.0-0ubuntu1~24.04.1","10.0.101-10.0.1-0ubuntu1~24.04.2","10.0.103-10.0.3-0ubuntu1~24.04.1","10.0.104-10.0.4-0ubuntu1~24.04.1","10.0.105-10.0.5-0ubuntu1~24.04.1","10.0.106-10.0.6-0ubuntu1~24.04.1","10.0.107-10.0.7-0ubuntu1~24.04.1","10.0.108-10.0.8-0ubuntu1~24.04.1","10.0.109-10.0.9-0ubuntu1~24.04.1","10.0.110-10.0.10-0ubuntu1~24.04.1","10.0.111-10.0.11-0ubuntu1~24.04.1","10.0.112-10.0.12-0ubuntu1~24.04.1","10.0.113-10.0.13-0ubuntu1~24.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"dotnet8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.133-8.0.33-0ubuntu1~24.04.1"}]}],"versions":["8.0.100-8.0.0~rc1-0ubuntu1","8.0.100-8.0.0~rc2-0ubuntu1","8.0.100-8.0.0~rc2-0ubuntu2","8.0.100-8.0.0-0ubuntu1","8.0.100-8.0.0-0ubuntu2","8.0.101-8.0.1-0ubuntu1","8.0.101-8.0.1-0ubuntu2","8.0.102-8.0.2-0ubuntu1","8.0.103-8.0.3-0ubuntu2","8.0.103-8.0.3-0ubuntu3","8.0.104-8.0.4-0ubuntu1","8.0.105-8.0.5-0ubuntu1~24.04.1","8.0.107-8.0.7-0ubuntu1~24.04.1","8.0.108-8.0.8-0ubuntu1~24.04.1","8.0.108-8.0.8-0ubuntu1~24.04.2","8.0.110-8.0.10-0ubuntu1~24.04.1","8.0.111-8.0.11-0ubuntu1~24.04.1","8.0.112-8.0.12-0ubuntu1~24.04.1","8.0.114-8.0.14-0ubuntu1~24.04.1","8.0.115-8.0.15-0ubuntu1~24.04.1","8.0.116-8.0.16-0ubuntu1~24.04.1","8.0.117-8.0.17-0ubuntu1~24.04.1","8.0.118-8.0.18-0ubuntu1~24.04.1","8.0.119-8.0.19-0ubuntu1~24.04.1","8.0.120-8.0.20-0ubuntu1~24.04.1","8.0.121-8.0.21-0ubuntu1~24.04.1","8.0.122-8.0.22-0ubuntu1~24.04.1","8.0.123-8.0.23-0ubuntu1~24.04.1","8.0.124-8.0.24-0ubuntu1~24.04.1","8.0.125-8.0.25-0ubuntu1~24.04.1","8.0.126-8.0.26-0ubuntu1~24.04.1","8.0.127-8.0.27-0ubuntu1~24.04.1","8.0.128-8.0.28-0ubuntu1~24.04.1","8.0.129-8.0.29-0ubuntu1~24.04.1","8.0.130-8.0.30-0ubuntu1~24.04.1","8.0.131-8.0.31-0ubuntu1~24.04.1","8.0.132-8.0.32-0ubuntu1~24.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"dotnet10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-10.0.14-0ubuntu1~26.10.1"}]}],"versions":["10.0.105-10.0.5-0ubuntu1","10.0.107-10.0.7-0ubuntu1~26.04.1","10.0.108-10.0.8-0ubuntu1","10.0.109-10.0.9-0ubuntu1","10.0.110-10.0.10-0ubuntu3","10.0.111-10.0.11-0ubuntu1","10.0.112-10.0.12-0ubuntu1","10.0.112-10.0.12-0ubuntu2","10.0.113-10.0.13-0ubuntu1~26.10.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"dotnet11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.100-11.0.0~rc3-0ubuntu1~26.10.1"}]}],"versions":["11.0.100-11.0.0~rc1-0ubuntu1","11.0.100-11.0.0~rc2-0ubuntu1~26.10.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"dotnet10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.114-10.0.14-0ubuntu1~26.04.1"}]}],"versions":["10.0.100-10.0.0~rc1-0ubuntu1","10.0.100-10.0.0~rc2-0ubuntu1","10.0.100-10.0.0-0ubuntu1","10.0.100-10.0.0-0ubuntu2","10.0.101-10.0.1-0ubuntu1","10.0.101-10.0.1-0ubuntu2","10.0.101-10.0.1-0ubuntu3","10.0.102-10.0.2-0ubuntu1","10.0.103-10.0.3-0ubuntu1","10.0.104-10.0.4-0ubuntu1","10.0.105-10.0.5-0ubuntu1","10.0.107-10.0.7-0ubuntu1~26.04.1","10.0.108-10.0.8-0ubuntu1~26.04.1","10.0.109-10.0.9-0ubuntu1~26.04.1","10.0.110-10.0.10-0ubuntu1~26.04.1","10.0.111-10.0.11-0ubuntu1~26.04.1","10.0.112-10.0.12-0ubuntu1~26.04.1","10.0.113-10.0.13-0ubuntu1~26.04.1"],"bundled":3}],"products":[{"vendor":"microsoft","product":".net 10.0 installed on linux"},{"vendor":"microsoft","product":".net 10.0 installed on mac os"},{"vendor":"microsoft","product":".net 10.0 installed on windows"},{"vendor":"microsoft","product":".net 11.0 installed on linux"},{"vendor":"microsoft","product":".net 11.0 installed on mac os"},{"vendor":"microsoft","product":".net 11.0 installed on windows"},{"vendor":"microsoft","product":".net 8.0 installed on linux"},{"vendor":"microsoft","product":".net 8.0 installed on mac os"},{"vendor":"microsoft","product":".net 8.0 installed on windows"},{"vendor":"microsoft","product":".net 9.0 installed on linux"},{"vendor":"microsoft","product":".net 9.0 installed on mac os"},{"vendor":"microsoft","product":".net 9.0 installed on windows"},{"vendor":"microsoft","product":".net source-build linux tarballs (all archive types)"},{"vendor":"microsoft","product":"asp.net core runtime and targeting-pack linux tarballs (microsoft-published)"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148","tags":["vendor-advisory","patch","report"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-114148","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:92420","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-111497","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-114148","tags":["report"]},{"url":"https://bugzilla.redhat.com/2558973","tags":["report"]},{"url":"https://bugzilla.redhat.com/2562054","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-92420.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:92427","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-92427.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:92428","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-92428.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:92429","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-92429.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:92430","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-92430.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:92431","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-92431.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:92432","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-92432.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:92438","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-92438.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:92492","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-92492.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:92511","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-62909","tags":["report"]},{"url":"https://bugzilla.redhat.com/2512185","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-92511.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-114148","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:92420","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2562054","tags":["report"]},{"url":"https://errata.rockylinux.org/RLSA-2026:92427","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:92428","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:92429","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:92430","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:92431","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:92432","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:92438","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:92492","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:92511","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2512185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-114148","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-114148","tags":["report"]},{"url":"https://github.com/dotnet/announcements/issues/495","tags":["report"]},{"url":"https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8958-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-102870","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-111497","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-114148","title":"ASP.NET Core Elevation of Privilege Vulnerability","description":"Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.","status":"published","published":"2026-10-29T15:21:47.615Z","modified":"2026-11-10T20:47:20.122Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-276"],"updated_at":"2026-11-10T22:18:25.731086Z"}],"euvd":[{"id":"EUVD-2026-113163","description":"Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.","status":"published","published":"2026-10-29T15:21:47Z","modified":"2026-11-10T20:47:20Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-10T22:23:55.284051Z"}],"nvd":[{"id":"CVE-2026-114148","description":"Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.","status":"published","published":"2026-10-29T16:17:58.693Z","modified":"2026-10-30T14:16:38.44Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:13:04.6346Z"}],"osv":[{"id":"ALPINE-CVE-2026-114148","description":"Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.","status":"published","published":"2026-10-29T16:17:58.693Z","modified":"2026-11-03T06:32:52.525354861Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:26.770911Z"},{"id":"BELL-CVE-2026-114148","status":"published","published":"2026-10-29T16:41:52.608477Z","modified":"2026-11-05T07:15:05.298355498Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T09:09:16.861975Z"},{"id":"RLSA-2026:92420","title":"Important: .NET 8.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows.  It particularly focuses on creating console applications, web applications and micro-services.  .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.\n\nSDK version: 8.0.133\nRuntime version: 8.0.33\n\nSecurity Fix(es):\n\n* brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)\n\n* dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\nBug Fix(es) and Enhancement(s):\n\n* Update .NET 8.0 to SDK 8.0.133 and Runtime 8.0.33 (JIRA:Rocky Linux-291714)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T00:01:20.627732Z","modified":"2026-10-31T00:30:02.692057974Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:92427","title":"Important: .NET 9.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows.  It particularly focuses on creating console applications, web applications and micro-services.  .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.\n\nSDK version: 9.0.123\nRuntime version: 9.0.22\n\nSecurity Fix(es):\n\n* dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\nBug Fix(es) and Enhancement(s):\n\n* Update .NET 9.0 to SDK 9.0.123 and Runtime 9.0.22 (JIRA:Rocky Linux-291723)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T00:01:20.627732Z","modified":"2026-10-31T00:30:02.694021444Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:92428","title":"Important: .NET 8.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows.  It particularly focuses on creating console applications, web applications and micro-services.  .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.\n\nSDK version: 8.0.133\nRuntime version: 8.0.33\n\nSecurity Fix(es):\n\n* brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)\n\n* dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\nBug Fix(es) and Enhancement(s):\n\n* Update .NET 8.0 to SDK 8.0.133 and Runtime 8.0.33 [rhel-10.2.z] (JIRA:Rocky Linux-291718)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T00:09:15.42589Z","modified":"2026-10-31T00:30:02.688384193Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:92429","title":"Important: .NET 9.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows.  It particularly focuses on creating console applications, web applications and micro-services.  .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.\n\nSDK version: 9.0.123\nRuntime version: 9.0.22\n\nSecurity Fix(es):\n\n* dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\nBug Fix(es) and Enhancement(s):\n\n* Update .NET 9.0 to SDK 9.0.123 and Runtime 9.0.22 [rhel-9.8.z] (JIRA:Rocky Linux-291727)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T12:05:03.078979Z","modified":"2026-10-31T12:30:02.523781708Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:92430","title":"Important: .NET 9.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows.  It particularly focuses on creating console applications, web applications and micro-services.  .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.\n\nSDK version: 9.0.123\nRuntime version: 9.0.22\n\nSecurity Fix(es):\n\n* dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\nBug Fix(es) and Enhancement(s):\n\n* Update .NET 9.0 to SDK 9.0.123 and Runtime 9.0.22 [rhel-10.2.z] (JIRA:Rocky Linux-291728)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T12:09:44.748638Z","modified":"2026-10-31T12:30:02.432693023Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:92431","title":"Important: .NET 10.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows.  It particularly focuses on creating console applications, web applications and micro-services.  .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.\n\nSDK version: 10.0.114\nRuntime version: 10.0.14\n\nSecurity Fix(es):\n\n* dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\nBug Fix(es) and Enhancement(s):\n\n* Update .NET 10.0 to SDK 10.0.114 and Runtime 10.0.14 (JIRA:Rocky Linux-291741)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T00:01:20.627732Z","modified":"2026-10-31T00:30:02.686266002Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:92432","title":"Important: .NET 10.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows.  It particularly focuses on creating console applications, web applications and micro-services.  .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.\n\nSDK version: 10.0.114\nRuntime version: 10.0.14\n\nSecurity Fix(es):\n\n* dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\nBug Fix(es) and Enhancement(s):\n\n* Update .NET 10.0 to SDK 10.0.114 and Runtime 10.0.14 [rhel-9.8.z] (JIRA:Rocky Linux-291744)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T12:05:03.078979Z","modified":"2026-10-31T12:30:02.523784647Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:92438","title":"Important: .NET 10.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows.  It particularly focuses on creating console applications, web applications and micro-services.  .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.\n\nSDK version: 10.0.114\nRuntime version: 10.0.14\n\nSecurity Fix(es):\n\n* dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\nBug Fix(es) and Enhancement(s):\n\n* Update .NET 10.0 to SDK 10.0.114 and Runtime 10.0.14 [rhel-10.2.z] (JIRA:Rocky Linux-291745)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T00:09:15.42589Z","modified":"2026-10-31T00:30:02.679248717Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:92492","title":"Important: .NET 8.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows.  It particularly focuses on creating console applications, web applications and micro-services.  .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.\n\nSDK version: 8.0.133\nRuntime version: 8.0.33\n\nSecurity Fix(es):\n\n* brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)\n\n* dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\nBug Fix(es) and Enhancement(s):\n\n* Update .NET 8.0 to SDK 8.0.133 and Runtime 8.0.33 [rhel-9.8.z] (JIRA:Rocky Linux-291717)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T12:05:03.078979Z","modified":"2026-10-31T12:30:02.422345445Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:92511","title":"Important: .NET 11.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows.  It particularly focuses on creating console applications, web applications and micro-services.  .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.\n\nSDK version: 11.0.100~rc.3.26522.148\nRuntime version: 11.0.0~rc.3.26522.148\n\nSecurity Fix(es):\n\n* .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909)\n\n* dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\nBug Fix(es) and Enhancement(s):\n\n* Update .NET 11 to RC 1 (JIRA:Rocky Linux-260220)\n\n* Update .NET 11 to RC 2 (JIRA:Rocky Linux-276919)\n\n* Update .NET 11 to RC 3 (JIRA:Rocky Linux-292372)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-31T00:01:20.627732Z","modified":"2026-10-31T00:30:02.676197629Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2026-114148","description":"Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.","status":"published","published":"2026-10-26T00:00:00Z","modified":"2026-11-05T11:45:52.182293218Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T13:30:15.321876Z"},{"id":"ALSA-2026:92420","title":"Important: .NET 8.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.  \n\nSDK version: 8.0.133  \nRuntime version: 8.0.33  \n\nSecurity Fix(es):  \n\n  * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)\n  * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Update .NET 8.0 to SDK 8.0.133 and Runtime 8.0.33 (JIRA:RHEL-291714)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-29T00:00:00Z","modified":"2026-10-31T10:45:02.454375341Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:92427","title":"Important: .NET 9.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.  \n\nSDK version: 9.0.123  \nRuntime version: 9.0.22  \n\nSecurity Fix(es):  \n\n  * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Update .NET 9.0 to SDK 9.0.123 and Runtime 9.0.22 (JIRA:RHEL-291723)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-29T00:00:00Z","modified":"2026-10-31T10:45:02.445394945Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:92428","title":"Important: .NET 8.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.  \n\nSDK version: 8.0.133  \nRuntime version: 8.0.33  \n\nSecurity Fix(es):  \n\n  * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)\n  * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Update .NET 8.0 to SDK 8.0.133 and Runtime 8.0.33 [rhel-10.2.z] (JIRA:RHEL-291718)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-29T00:00:00Z","modified":"2026-10-31T11:00:02.381116777Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:92429","title":"Important: .NET 9.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.  \n\nSDK version: 9.0.123  \nRuntime version: 9.0.22  \n\nSecurity Fix(es):  \n\n  * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Update .NET 9.0 to SDK 9.0.123 and Runtime 9.0.22 [rhel-9.8.z] (JIRA:RHEL-291727)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-29T00:00:00Z","modified":"2026-10-30T16:45:01.899593762Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:92430","title":"Important: .NET 9.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.  \n\nSDK version: 9.0.123  \nRuntime version: 9.0.22  \n\nSecurity Fix(es):  \n\n  * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Update .NET 9.0 to SDK 9.0.123 and Runtime 9.0.22 [rhel-10.2.z] (JIRA:RHEL-291728)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-29T00:00:00Z","modified":"2026-10-31T11:00:02.377574223Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:92431","title":"Important: .NET 10.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.  \n\nSDK version: 10.0.114  \nRuntime version: 10.0.14  \n\nSecurity Fix(es):  \n\n  * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Update .NET 10.0 to SDK 10.0.114 and Runtime 10.0.14 (JIRA:RHEL-291741)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-29T00:00:00Z","modified":"2026-10-31T10:45:02.449101889Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:92432","title":"Important: .NET 10.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.  \n\nSDK version: 10.0.114  \nRuntime version: 10.0.14  \n\nSecurity Fix(es):  \n\n  * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Update .NET 10.0 to SDK 10.0.114 and Runtime 10.0.14 [rhel-9.8.z] (JIRA:RHEL-291744)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-29T00:00:00Z","modified":"2026-10-30T16:45:01.897104857Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:92438","title":"Important: .NET 10.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.  \n\nSDK version: 10.0.114  \nRuntime version: 10.0.14  \n\nSecurity Fix(es):  \n\n  * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Update .NET 10.0 to SDK 10.0.114 and Runtime 10.0.14 [rhel-10.2.z] (JIRA:RHEL-291745)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-29T00:00:00Z","modified":"2026-10-31T11:00:02.382575851Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:92492","title":"Important: .NET 8.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.  \n\nSDK version: 8.0.133  \nRuntime version: 8.0.33  \n\nSecurity Fix(es):  \n\n  * brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497)\n  * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Update .NET 8.0 to SDK 8.0.133 and Runtime 8.0.33 [rhel-9.8.z] (JIRA:RHEL-291717)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-29T00:00:00Z","modified":"2026-10-30T16:45:01.885656459Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:92511","title":"Important: .NET 11.0 security, bug fix, and enhancement update","description":".NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.  \n\nSDK version: 11.0.100~rc.3.26522.148  \nRuntime version: 11.0.0~rc.3.26522.148  \n\nSecurity Fix(es):  \n\n  * .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909)\n  * dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * Update .NET 11 to RC 1 (JIRA:RHEL-260220)\n  * Update .NET 11 to RC 2 (JIRA:RHEL-276919)\n  * Update .NET 11 to RC 3 (JIRA:RHEL-292372)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-29T00:00:00Z","modified":"2026-10-31T10:45:02.450689207Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"USN-8958-1","title":"dotnet8, dotnet10, dotnet11 vulnerabilities","description":"It was discovered that the .NET Blazor WebAssembly debug proxy did not\nproperly escape certain values. An attacker could possibly use this issue\nto execute arbitrary code. The fix for this CVE was originally released via\nUSN-8942-1, but it was found to be incomplete. This issue only affected\ndotnet10 and dotnet11. (CVE-2026-102870)\n\nIt was discovered that the Brotli decompression library used by .NET\nincorrectly handled certain compressed streams. A remote attacker could\npossibly use this issue to cause a denial of service or execute arbitrary\ncode. (CVE-2026-111497)\n\nAlen Cheung discovered that .NET did not properly handle file ownership in\ncertain circumstances. An attacker could possibly use this issue to elevate\nlocal privileges. (CVE-2026-114148)","status":"published","published":"2026-10-29T17:02:55Z","modified":"2026-10-31T03:30:03.459476213Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}