NuGet Microsoft.AspNetCore.All

Name: NuGet Microsoft.AspNetCore.All
Brand: NuGet

productUS

pkg:nuget/Microsoft.AspNetCore.All

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

critical

by severity

0critical7high1medium0low

updated 2026-10-28

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-8269US	high7.5	26.8% (98th)	Exploit	2.2.7	2018-09-13	2 versions
CVE-2020-0603US	high8.8	21.0% (98th)	—	2.1.15	2020-01-14	2.1.0 → 2.1.15
CVE-2017-11879US	high8.8	9.40% (95th)	—	2.0.3	2017-11-15	2.0.0 → 2.0.3
CVE-2019-0564US	high7.5	8.39% (95th)	—	2.1.7	2019-01-08	2 versions
CVE-2020-0602US	high7.5	7.61% (95th)	—	2.1.15	2020-01-14	2.1.0 → 2.1.15
CVE-2020-1597US	high7.5	6.56% (94th)	—	2.1.21	2020-08-17	2.1.0 → 2.1.21
CVE-2018-8409US	high7.5	6.56% (94th)	—	2.1.4	2018-09-13	2.1.0 → 2.1.4
CVE-2019-1075US	medium6.1	2.64% (86th)	—	2.2.6	2019-07-15	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-19CWE-191 CVEs
CWE-404Improper Resource Shutdown or Release1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.