NuGet package
microsoft.aspnetcore.dataprotection
pkg:nuget/microsoft.aspnetcore.dataprotection
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-40372 | Cri | 9.1 | >= 10.0.0, < 10.0.7 | 10.0.7 | Apr 21, 2026 | Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. |
- affected >= 10.0.0, < 10.0.7fixed 10.0.7
Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.