NuGet Microsoft.AspNetCore.App

Name: NuGet Microsoft.AspNetCore.App
Brand: NuGet

productUS

pkg:nuget/Microsoft.AspNetCore.App

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

unpatched

critical

by severity

0critical5high2medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-0603US	high8.8	21.0% (98th)	—	2.1.15	2020-01-14	3 versions
CVE-2019-0564US	high7.5	8.39% (95th)	—	2.1.7	2019-01-08	2 versions
CVE-2020-0602US	high7.5	7.61% (95th)	—	3.0.1	2020-01-14	3 versions
CVE-2020-1597US	high7.5	6.56% (94th)	—	2.1.21	2020-08-17	2.1.0 → 2.1.21
CVE-2018-8409US	high7.5	6.56% (94th)	—	2.1.4	2018-09-13	2.1.0 → 2.1.4
CVE-2020-1045US	medium5.0	5.93% (93rd)	—	2.1.22	2020-09-11	< 2.1.22
CVE-2019-1075US	medium6.1	2.64% (86th)	—	2.1.12	2019-07-15	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-19CWE-191 CVEs
CWE-404Improper Resource Shutdown or Release1 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVEs
CWE-787Out-of-bounds Write1 CVEs
CWE-807Reliance on Untrusted Inputs in a Security Decision1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.