Microsoft.AspNetCore.DataProtection vulnerabilities (NuGet)

1 vulnerability.

• Microsoft.AspNetCore.DataProtection NuGet ASP.NET Core Elevation of Privilege Vulnerability CVE-2026-40372 Fix available EPSS 11.2% 9.1 CriticalApril 21, 2026