Dotnet Eshop vulnerabilities

• dotnet eshop dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication CVE-2026-112044 6.9 MediumOctober 19, 2026
• dotnet eshop dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injection CVE-2026-105444 5.3 MediumOctober 5, 2026