{
    "document": {
        "category": "csaf_base",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE"
            }
        },
        "lang": "en",
        "notes": [
            {
                "category": "legal_disclaimer",
                "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
            }
        ],
        "publisher": {
            "category": "coordinator",
            "contact_details": "cert@ncsc.nl",
            "name": "National Cyber Security Centre",
            "namespace": "https://www.ncsc.nl/"
        },
        "title": "CVE-2026-70159",
        "tracking": {
            "current_release_date": "2026-10-14T10:25:48.827047Z",
            "generator": {
                "date": "2026-02-17T15:00:00Z",
                "engine": {
                    "name": "V.E.L.M.A",
                    "version": "1.7"
                }
            },
            "id": "CVE-2026-70159",
            "initial_release_date": "2026-10-13T09:37:32.703654Z",
            "revision_history": [
                {
                    "date": "2026-10-13T09:37:32.703654Z",
                    "number": "1",
                    "summary": "CVE created.| Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (8).| Product Identifiers created (13).| Product Threats created (28).| Product Remediations created (26).| Products created (6).| CWES updated (1).| Exploitable created."
                },
                {
                    "date": "2026-10-13T09:37:43.338558Z",
                    "number": "2",
                    "summary": "NCSC Score created."
                },
                {
                    "date": "2026-10-13T16:53:07.649805Z",
                    "number": "3",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-10-13T18:57:55.426379Z",
                    "number": "4",
                    "summary": "Source connected.| CVE status created. (valid)"
                },
                {
                    "date": "2026-10-13T19:40:55.571469Z",
                    "number": "5",
                    "summary": "CVSS created.| CWES created (1).| Products created (8).| References created (1).| Description created for source.| Unknown change.| Product Identifiers created (4)."
                },
                {
                    "date": "2026-10-13T19:40:56.901926Z",
                    "number": "6",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-10-13T19:52:03.416158Z",
                    "number": "7",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (1).| CWES updated (1)."
                },
                {
                    "date": "2026-10-13T19:52:06.862169Z",
                    "number": "8",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-10-13T20:06:00.202650Z",
                    "number": "9",
                    "summary": "Source connected.| CVE status created. (valid)| News created (1)."
                },
                {
                    "date": "2026-10-13T20:06:02.872420Z",
                    "number": "10",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-10-13T20:40:06.149184Z",
                    "number": "11",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)."
                },
                {
                    "date": "2026-10-13T20:40:12.079242Z",
                    "number": "12",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-10-13T22:40:08.563734Z",
                    "number": "13",
                    "summary": "Unknown change."
                },
                {
                    "date": "2026-10-14T00:26:29.651633Z",
                    "number": "14",
                    "summary": "CVSS created.| CWES created (1).| Products created (87).| References created (3).| Description created for source.| Unknown change.| Product Identifiers created (82)."
                },
                {
                    "date": "2026-10-14T00:32:40.855225Z",
                    "number": "15",
                    "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (24).| Product Identifiers created (24).| Product Threats created (52).| Product Remediations created (26).| Products connected (2).| CWES updated (1).| Exploitable created."
                },
                {
                    "date": "2026-10-14T10:25:24.899281Z",
                    "number": "16",
                    "summary": "Source connected.| CVE status created. (valid)| Products connected (23).| References created (70)."
                },
                {
                    "date": "2026-10-14T10:25:37.033600Z",
                    "number": "17",
                    "summary": "NCSC Score updated."
                }
            ],
            "status": "interim",
            "version": "17"
        }
    },
    "product_tree": {
        "branches": [
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10",
                                "product": {
                                    "name": "vers:unknown/10",
                                    "product_id": "CSAFPID-5810232",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:.net:10.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/11",
                                "product": {
                                    "name": "vers:unknown/11",
                                    "product_id": "CSAFPID-9164980",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:.net:11.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8",
                                "product": {
                                    "name": "vers:unknown/8",
                                    "product_id": "CSAFPID-6042657",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:.net:8.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9",
                                "product": {
                                    "name": "vers:unknown/9",
                                    "product_id": "CSAFPID-5810233",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:.net:9.0"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": ".NET"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/3.5",
                                "product": {
                                    "name": "vers:unknown/3.5",
                                    "product_id": "CSAFPID-1373391",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:.net_framework:3.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.6.2",
                                "product": {
                                    "name": "vers:unknown/4.6.2",
                                    "product_id": "CSAFPID-1373392",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:.net_framework:4.6.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.7",
                                "product": {
                                    "name": "vers:unknown/4.7",
                                    "product_id": "CSAFPID-1373384",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:.net_framework:4.7"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.7.1",
                                "product": {
                                    "name": "vers:unknown/4.7.1",
                                    "product_id": "CSAFPID-1373382",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:.net_framework:4.7.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.7.2",
                                "product": {
                                    "name": "vers:unknown/4.7.2",
                                    "product_id": "CSAFPID-1373383",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:.net_framework:4.7.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.8",
                                "product": {
                                    "name": "vers:unknown/4.8",
                                    "product_id": "CSAFPID-1373385",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:.net_framework:4.8"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/4.8.1",
                                "product": {
                                    "name": "vers:unknown/4.8.1",
                                    "product_id": "CSAFPID-1373393",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:.net_framework:4.8.1"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": ".NET Framework"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/core 10.0",
                                "product": {
                                    "name": "vers:unknown/core 10.0",
                                    "product_id": "CSAFPID-5793557",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:asp.net:core_10.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/core 11.0",
                                "product": {
                                    "name": "vers:unknown/core 11.0",
                                    "product_id": "CSAFPID-9164981",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:asp.net:core_3.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/core 8.0",
                                "product": {
                                    "name": "vers:unknown/core 8.0",
                                    "product_id": "CSAFPID-2470410",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:asp.net:core_8.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/core 9.0",
                                "product": {
                                    "name": "vers:unknown/core 9.0",
                                    "product_id": "CSAFPID-2470409",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:asp.net:core_9.0"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "ASP.NET"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-9696197",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:visual_studio_2022:-"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft Visual Studio 2022"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-5137200",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft Visual Studio 2022 version 17.14"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692001",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.10:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft Visual Studio 2026 version 18.10"
                            }
                        ],
                        "category": "product_family",
                        "name": "Developer Tools"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/17.14.0|<17.14.42",
                                "product": {
                                    "name": "vers:unknown/17.14.0|<17.14.42",
                                    "product_id": "CSAFPID-9691381"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft Visual Studio 2022 version 17.14"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-9696194",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:visual_studio_2026:-"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft Visual Studio 2026"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/18.10.0|<18.10.4",
                                "product": {
                                    "name": "vers:unknown/18.10.0|<18.10.4",
                                    "product_id": "CSAFPID-9691382"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft Visual Studio 2026 version 18.10"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/unknown",
                                "product": {
                                    "name": "vers:unknown/unknown",
                                    "product_id": "CSAFPID-1373389",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:visual_studio_code:-"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft Visual Studio Code"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.0|<10.0.13",
                                "product": {
                                    "name": "vers:unknown/10.0.0|<10.0.13",
                                    "product_id": "CSAFPID-9691454"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft.AspNetCore.SignalR.Common"
                    },
                    {
                        "branches": [
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692903",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.common:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Common on .NET 10.0 installed on Linux"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692904",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.common:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Common on .NET 10.0 installed on Mac OS"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692902",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.common:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Common on .NET 10.0 installed on Windows"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692909",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.common:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Common on .NET 11.0 installed on Linux"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692910",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.common:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Common on .NET 11.0 installed on Mac OS"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692908",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.common:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Common on .NET 11.0 installed on Windows"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692915",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.common:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Common on .NET 8.0 installed on Linux"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692916",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.common:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Common on .NET 8.0 installed on Mac OS"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692914",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.common:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Common on .NET 8.0 installed on Windows"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692921",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.common:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Common on .NET 9.0 installed on Linux"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692922",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.common:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Common on .NET 9.0 installed on Mac OS"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692920",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.common:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Common on .NET 9.0 installed on Windows"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692906",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.core:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Core on .NET 10.0 installed on Linux"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692907",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.core:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Core on .NET 10.0 installed on Mac OS"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692905",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.core:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Core on .NET 10.0 installed on Windows"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692912",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.core:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Core on .NET 11.0 installed on Linux"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692913",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.core:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Core on .NET 11.0 installed on Mac OS"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692911",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.core:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Core on .NET 11.0 installed on Windows"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692918",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.core:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Core on .NET 8.0 installed on Linux"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692919",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.core:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Core on .NET 8.0 installed on Mac OS"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692917",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.core:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Core on .NET 8.0 installed on Windows"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692924",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.core:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Core on .NET 9.0 installed on Linux"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692925",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.core:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Core on .NET 9.0 installed on Mac OS"
                            },
                            {
                                "branches": [
                                    {
                                        "category": "product_version_range",
                                        "name": "vers:microsoft/*",
                                        "product": {
                                            "name": "vers:microsoft/*",
                                            "product_id": "CSAFPID-9692923",
                                            "product_identification_helper": {
                                                "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.core:*:*:*:*:*:*:*:*"
                                            }
                                        }
                                    }
                                ],
                                "category": "product_name",
                                "name": "Microsoft.AspNetCore.SignalR.Core on .NET 9.0 installed on Windows"
                            }
                        ],
                        "category": "product_family",
                        "name": "Other"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.0.0|<1.2.14",
                                "product": {
                                    "name": "vers:unknown/1.0.0|<1.2.14",
                                    "product_id": "CSAFPID-9691455"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft.AspNetCore.SignalR.Core"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/7.4",
                                "product": {
                                    "name": "vers:unknown/7.4",
                                    "product_id": "CSAFPID-5118936",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:powershell:7.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/7.5",
                                "product": {
                                    "name": "vers:unknown/7.5",
                                    "product_id": "CSAFPID-5118937",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:powershell:7.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/7.6",
                                "product": {
                                    "name": "vers:unknown/7.6",
                                    "product_id": "CSAFPID-8968691",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:powershell:7.6"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "PowerShell"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/suite",
                                "product": {
                                    "name": "vers:unknown/suite",
                                    "product_id": "CSAFPID-9696196",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:sysinternals:suite"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/windows process monitor",
                                "product": {
                                    "name": "vers:unknown/windows process monitor",
                                    "product_id": "CSAFPID-9696195",
                                    "product_identification_helper": {
                                        "cpe": "cpe:/a:microsoft:sysinternals:windows_process_monitor"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "SysInternals"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=17.14.0|<=17.14.42",
                                "product": {
                                    "name": "vers:unknown/>=17.14.0|<=17.14.42",
                                    "product_id": "CSAFPID-9691391",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "visual_studio_2022"
                    }
                ],
                "category": "vendor",
                "name": "Microsoft"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.0",
                                "product": {
                                    "name": "vers:unknown/10.0.0",
                                    "product_id": "CSAFPID-9692513",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@10.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.1",
                                "product": {
                                    "name": "vers:unknown/10.0.1",
                                    "product_id": "CSAFPID-9692514",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@10.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.10",
                                "product": {
                                    "name": "vers:unknown/10.0.10",
                                    "product_id": "CSAFPID-9692515",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@10.0.10"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.11",
                                "product": {
                                    "name": "vers:unknown/10.0.11",
                                    "product_id": "CSAFPID-9692516",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@10.0.11"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.12",
                                "product": {
                                    "name": "vers:unknown/10.0.12",
                                    "product_id": "CSAFPID-9692517",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@10.0.12"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.2",
                                "product": {
                                    "name": "vers:unknown/10.0.2",
                                    "product_id": "CSAFPID-9692518",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@10.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.3",
                                "product": {
                                    "name": "vers:unknown/10.0.3",
                                    "product_id": "CSAFPID-9692519",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@10.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.4",
                                "product": {
                                    "name": "vers:unknown/10.0.4",
                                    "product_id": "CSAFPID-9692520",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@10.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.5",
                                "product": {
                                    "name": "vers:unknown/10.0.5",
                                    "product_id": "CSAFPID-9692521",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@10.0.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.6",
                                "product": {
                                    "name": "vers:unknown/10.0.6",
                                    "product_id": "CSAFPID-9692522",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@10.0.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.7",
                                "product": {
                                    "name": "vers:unknown/10.0.7",
                                    "product_id": "CSAFPID-9692523",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@10.0.7"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.8",
                                "product": {
                                    "name": "vers:unknown/10.0.8",
                                    "product_id": "CSAFPID-9692524",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@10.0.8"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/10.0.9",
                                "product": {
                                    "name": "vers:unknown/10.0.9",
                                    "product_id": "CSAFPID-9692525",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@10.0.9"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.0",
                                "product": {
                                    "name": "vers:unknown/8.0.0",
                                    "product_id": "CSAFPID-9692526",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.1",
                                "product": {
                                    "name": "vers:unknown/8.0.1",
                                    "product_id": "CSAFPID-9692527",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.10",
                                "product": {
                                    "name": "vers:unknown/8.0.10",
                                    "product_id": "CSAFPID-9692528",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.10"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.11",
                                "product": {
                                    "name": "vers:unknown/8.0.11",
                                    "product_id": "CSAFPID-9692529",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.11"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.12",
                                "product": {
                                    "name": "vers:unknown/8.0.12",
                                    "product_id": "CSAFPID-9692530",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.12"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.13",
                                "product": {
                                    "name": "vers:unknown/8.0.13",
                                    "product_id": "CSAFPID-9692531",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.13"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.14",
                                "product": {
                                    "name": "vers:unknown/8.0.14",
                                    "product_id": "CSAFPID-9692532",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.14"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.15",
                                "product": {
                                    "name": "vers:unknown/8.0.15",
                                    "product_id": "CSAFPID-9692533",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.15"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.16",
                                "product": {
                                    "name": "vers:unknown/8.0.16",
                                    "product_id": "CSAFPID-9692534",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.16"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.17",
                                "product": {
                                    "name": "vers:unknown/8.0.17",
                                    "product_id": "CSAFPID-9692535",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.17"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.18",
                                "product": {
                                    "name": "vers:unknown/8.0.18",
                                    "product_id": "CSAFPID-9692536",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.18"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.19",
                                "product": {
                                    "name": "vers:unknown/8.0.19",
                                    "product_id": "CSAFPID-9692537",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.19"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.2",
                                "product": {
                                    "name": "vers:unknown/8.0.2",
                                    "product_id": "CSAFPID-9692538",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.20",
                                "product": {
                                    "name": "vers:unknown/8.0.20",
                                    "product_id": "CSAFPID-9692539",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.20"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.21",
                                "product": {
                                    "name": "vers:unknown/8.0.21",
                                    "product_id": "CSAFPID-9692540",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.21"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.22",
                                "product": {
                                    "name": "vers:unknown/8.0.22",
                                    "product_id": "CSAFPID-9692541",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.22"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.23",
                                "product": {
                                    "name": "vers:unknown/8.0.23",
                                    "product_id": "CSAFPID-9692542",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.23"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.24",
                                "product": {
                                    "name": "vers:unknown/8.0.24",
                                    "product_id": "CSAFPID-9692543",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.24"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.25",
                                "product": {
                                    "name": "vers:unknown/8.0.25",
                                    "product_id": "CSAFPID-9692544",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.25"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.26",
                                "product": {
                                    "name": "vers:unknown/8.0.26",
                                    "product_id": "CSAFPID-9692545",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.26"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.27",
                                "product": {
                                    "name": "vers:unknown/8.0.27",
                                    "product_id": "CSAFPID-9692546",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.27"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.28",
                                "product": {
                                    "name": "vers:unknown/8.0.28",
                                    "product_id": "CSAFPID-9692547",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.28"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.29",
                                "product": {
                                    "name": "vers:unknown/8.0.29",
                                    "product_id": "CSAFPID-9692548",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.29"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.3",
                                "product": {
                                    "name": "vers:unknown/8.0.3",
                                    "product_id": "CSAFPID-9692549",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.30",
                                "product": {
                                    "name": "vers:unknown/8.0.30",
                                    "product_id": "CSAFPID-9692550",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.30"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.31",
                                "product": {
                                    "name": "vers:unknown/8.0.31",
                                    "product_id": "CSAFPID-9692551",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.31"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.4",
                                "product": {
                                    "name": "vers:unknown/8.0.4",
                                    "product_id": "CSAFPID-9692552",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.5",
                                "product": {
                                    "name": "vers:unknown/8.0.5",
                                    "product_id": "CSAFPID-9692553",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.6",
                                "product": {
                                    "name": "vers:unknown/8.0.6",
                                    "product_id": "CSAFPID-9692554",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.7",
                                "product": {
                                    "name": "vers:unknown/8.0.7",
                                    "product_id": "CSAFPID-9692555",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.7"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/8.0.8",
                                "product": {
                                    "name": "vers:unknown/8.0.8",
                                    "product_id": "CSAFPID-9692556",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@8.0.8"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.0",
                                "product": {
                                    "name": "vers:unknown/9.0.0",
                                    "product_id": "CSAFPID-9692557",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.1",
                                "product": {
                                    "name": "vers:unknown/9.0.1",
                                    "product_id": "CSAFPID-9692558",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.10",
                                "product": {
                                    "name": "vers:unknown/9.0.10",
                                    "product_id": "CSAFPID-9692559",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.10"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.11",
                                "product": {
                                    "name": "vers:unknown/9.0.11",
                                    "product_id": "CSAFPID-9692560",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.11"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.12",
                                "product": {
                                    "name": "vers:unknown/9.0.12",
                                    "product_id": "CSAFPID-9692561",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.12"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.13",
                                "product": {
                                    "name": "vers:unknown/9.0.13",
                                    "product_id": "CSAFPID-9692562",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.13"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.14",
                                "product": {
                                    "name": "vers:unknown/9.0.14",
                                    "product_id": "CSAFPID-9692563",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.14"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.15",
                                "product": {
                                    "name": "vers:unknown/9.0.15",
                                    "product_id": "CSAFPID-9692564",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.15"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.16",
                                "product": {
                                    "name": "vers:unknown/9.0.16",
                                    "product_id": "CSAFPID-9692565",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.16"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.17",
                                "product": {
                                    "name": "vers:unknown/9.0.17",
                                    "product_id": "CSAFPID-9692566",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.17"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.18",
                                "product": {
                                    "name": "vers:unknown/9.0.18",
                                    "product_id": "CSAFPID-9692567",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.18"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.19",
                                "product": {
                                    "name": "vers:unknown/9.0.19",
                                    "product_id": "CSAFPID-9692568",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.19"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.2",
                                "product": {
                                    "name": "vers:unknown/9.0.2",
                                    "product_id": "CSAFPID-9692569",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.20",
                                "product": {
                                    "name": "vers:unknown/9.0.20",
                                    "product_id": "CSAFPID-9692570",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.20"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.3",
                                "product": {
                                    "name": "vers:unknown/9.0.3",
                                    "product_id": "CSAFPID-9692571",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.4",
                                "product": {
                                    "name": "vers:unknown/9.0.4",
                                    "product_id": "CSAFPID-9692572",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.5",
                                "product": {
                                    "name": "vers:unknown/9.0.5",
                                    "product_id": "CSAFPID-9692573",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.5"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.6",
                                "product": {
                                    "name": "vers:unknown/9.0.6",
                                    "product_id": "CSAFPID-9692574",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.6"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.7",
                                "product": {
                                    "name": "vers:unknown/9.0.7",
                                    "product_id": "CSAFPID-9692575",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.7"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.8",
                                "product": {
                                    "name": "vers:unknown/9.0.8",
                                    "product_id": "CSAFPID-9692576",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.8"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/9.0.9",
                                "product": {
                                    "name": "vers:unknown/9.0.9",
                                    "product_id": "CSAFPID-9692577",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Common@9.0.9"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=10.0.0|<10.0.13",
                                "product": {
                                    "name": "vers:unknown/>=10.0.0|<10.0.13",
                                    "product_id": "CSAFPID-9692578"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=11.0.0-preview.5|<11.0.0-rc.2",
                                "product": {
                                    "name": "vers:unknown/>=11.0.0-preview.5|<11.0.0-rc.2",
                                    "product_id": "CSAFPID-9692579"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=8.0.0|<8.0.32",
                                "product": {
                                    "name": "vers:unknown/>=8.0.0|<8.0.32",
                                    "product_id": "CSAFPID-9692580"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=9.0.0|<9.0.21",
                                "product": {
                                    "name": "vers:unknown/>=9.0.0|<9.0.21",
                                    "product_id": "CSAFPID-9692581"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft.AspNetCore.SignalR.Common"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.0.0",
                                "product": {
                                    "name": "vers:unknown/1.0.0",
                                    "product_id": "CSAFPID-9692582",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.0.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.0.1",
                                "product": {
                                    "name": "vers:unknown/1.0.1",
                                    "product_id": "CSAFPID-9692583",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.0.1"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.0.15",
                                "product": {
                                    "name": "vers:unknown/1.0.15",
                                    "product_id": "CSAFPID-9692584",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.0.15"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.0.2",
                                "product": {
                                    "name": "vers:unknown/1.0.2",
                                    "product_id": "CSAFPID-9692585",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.0.2"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.0.3",
                                "product": {
                                    "name": "vers:unknown/1.0.3",
                                    "product_id": "CSAFPID-9692586",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.0.3"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.0.4",
                                "product": {
                                    "name": "vers:unknown/1.0.4",
                                    "product_id": "CSAFPID-9692587",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.0.4"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.1.0",
                                "product": {
                                    "name": "vers:unknown/1.1.0",
                                    "product_id": "CSAFPID-9692588",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.1.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.1.0-preview1-35029",
                                "product": {
                                    "name": "vers:unknown/1.1.0-preview1-35029",
                                    "product_id": "CSAFPID-9692589",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.1.0-preview1-35029"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.1.0-preview2-35157",
                                "product": {
                                    "name": "vers:unknown/1.1.0-preview2-35157",
                                    "product_id": "CSAFPID-9692590",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.1.0-preview2-35157"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.1.0-preview3-35497",
                                "product": {
                                    "name": "vers:unknown/1.1.0-preview3-35497",
                                    "product_id": "CSAFPID-9692591",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.1.0-preview3-35497"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.2.0",
                                "product": {
                                    "name": "vers:unknown/1.2.0",
                                    "product_id": "CSAFPID-9692592",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.2.0"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.2.10",
                                "product": {
                                    "name": "vers:unknown/1.2.10",
                                    "product_id": "CSAFPID-9692593",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.2.10"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.2.11",
                                "product": {
                                    "name": "vers:unknown/1.2.11",
                                    "product_id": "CSAFPID-9692594",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.2.11"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.2.12",
                                "product": {
                                    "name": "vers:unknown/1.2.12",
                                    "product_id": "CSAFPID-9692595",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.2.12"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.2.13",
                                "product": {
                                    "name": "vers:unknown/1.2.13",
                                    "product_id": "CSAFPID-9692596",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.2.13"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.2.8",
                                "product": {
                                    "name": "vers:unknown/1.2.8",
                                    "product_id": "CSAFPID-9692597",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.2.8"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/1.2.9",
                                "product": {
                                    "name": "vers:unknown/1.2.9",
                                    "product_id": "CSAFPID-9692598",
                                    "product_identification_helper": {
                                        "purl": "pkg:nuget/Microsoft.AspNetCore.SignalR.Core@1.2.9"
                                    }
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=1.0.0|<1.2.14",
                                "product": {
                                    "name": "vers:unknown/>=1.0.0|<1.2.14",
                                    "product_id": "CSAFPID-9692599"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Microsoft.AspNetCore.SignalR.Core"
                    }
                ],
                "category": "vendor",
                "name": "dotnet"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=10.0.0|<=10.0.13",
                                "product": {
                                    "name": "vers:unknown/>=10.0.0|<=10.0.13",
                                    "product_id": "CSAFPID-9691456",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.common:*:*:*:*:*:*:*:*"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "microsoft.aspnetcore.signalr.common"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=1.0.0|<=1.2.14",
                                "product": {
                                    "name": "vers:unknown/>=1.0.0|<=1.2.14",
                                    "product_id": "CSAFPID-9691457",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:microsoft:microsoft.aspnetcore.signalr.core:*:*:*:*:*:*:*:*"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "microsoft.aspnetcore.signalr.core"
                    },
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=18.10.0|<=18.10.4",
                                "product": {
                                    "name": "vers:unknown/>=18.10.0|<=18.10.4",
                                    "product_id": "CSAFPID-9691388",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.10:*:*:*:*:*:*:*:*"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "microsoft_visual_studio_2026_version_18.10"
                    }
                ],
                "category": "vendor",
                "name": "microsoft"
            }
        ]
    },
    "vulnerabilities": [
        {
            "cve": "CVE-2026-70159",
            "cwe": {
                "id": "CWE-770",
                "name": "Allocation of Resources Without Limits or Throttling"
            },
            "notes": [
                {
                    "category": "description",
                    "text": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
                    "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-70159"
                },
                {
                    "category": "description",
                    "text": "Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.",
                    "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-70159"
                },
                {
                    "category": "description",
                    "text": "## Executive summary\n\nMicrosoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.SignalR.Common and Microsoft.AspNetCore.SignalR.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nSignalR stateful reconnect clients can indefinitely block broadcasts through `MessageBuffer.ResendAsync` backpressure and retain associated resources.\n\n## Announcement\n\nAnnouncement for this issue can be found at https://github.com/dotnet/announcements/issues/452\n\n## CVSS Details\n\n- **Version:** 3.1\n- **Severity:** High\n- **Score:** 7.5\n- **Vector:** `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`\n\n- **Weakness:** CWE-770 (Allocation of Resources Without Limits or Throttling)\n## Affected Platforms\n\n- **Platforms:** Windows, Linux, macOS\n- **Architectures:** All\n\n## <a name=\"affected-packages\"></a>Affected Packages\n\nThe vulnerability affects Microsoft .NET projects that use an affected package version listed below.\n\nPackage name | Affected version | Patched version\n------------ | ---------------- | ---------------\n[Microsoft.AspNetCore.SignalR.Common](https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Common) | >= 10.0.0, <= 10.0.12 | 10.0.13\n[Microsoft.AspNetCore.SignalR.Core](https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Core) | >= 1.0.0, <= 1.2.13 | 1.2.14\n[Microsoft.AspNetCore.SignalR.Common](https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Common) | >= 11.0.0-preview.5, <= 11.0.0-rc.1 | 11.0.0-rc.2\n[Microsoft.AspNetCore.SignalR.Common](https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Common) | >= 8.0.0, <= 8.0.31 | 8.0.32\n[Microsoft.AspNetCore.SignalR.Common](https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Common) | >= 9.0.0, <= 9.0.20 | 9.0.21\n\n## Advisory FAQ\n\n### <a name=\"how-affected\"></a>How do I know if I am affected?\n\nIf using a package listed in [affected packages](#affected-packages), you're exposed to the vulnerability.\n\n### <a name=\"how-fix\"></a>How do I fix the issue?\n\n1. To fix the issue please install the latest version of .NET. If you have installed one or more .NET SDKs through Visual Studio, Visual Studio will prompt you to update Visual Studio, which will also update your .NET SDKs.\n2. If your application references the vulnerable package, update the package reference to the patched version. You can list the versions you have installed by running the `dotnet --info` command.\n\nOnce you have installed the updated runtime or SDK, restart your apps for the update to take effect.\n\nAdditionally, if you've deployed [self-contained applications](https://docs.microsoft.com/dotnet/core/deploying/#self-contained-deployments-scd) targeting any of the impacted versions, these applications are also vulnerable and must be recompiled and redeployed.\n\n## Other Information\n\n### Reporting Security Issues\n\nIf you have found a potential security issue in a supported version of .NET, please report it to the Microsoft Security Response Center (MSRC) via the [MSRC Researcher Portal](https://msrc.microsoft.com/report/vulnerability/new). Further information can be found in the MSRC [Report an Issue FAQ](https://www.microsoft.com/msrc/faqs-report-an-issue).\n\nSecurity reports made through MSRC may qualify for the Microsoft .NET Bounty. Details of the Microsoft .NET Bounty Program including terms and conditions are at https://aka.ms/corebounty.\n\n### Support\n\nYou can ask questions about this issue on GitHub in the .NET GitHub organization. The main repos are located at https://github.com/dotnet/runtime. The Announcements repo (https://github.com/dotnet/Announcements) will contain this bulletin as an issue and will include a link to a discussion issue. You can ask questions in the linked discussion issue.\n\n### Disclaimer\n\nThe information provided in this advisory is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.\n\n### External Links\n\n[CVE-2026-70159](https://www.cve.org/CVERecord?id=CVE-2026-70159)\n\n### Acknowledgements\n\n- nono\n- Vincent55 Yang (https://vincent55.tw/)\n\n### Revisions\n\nV1.0 (10/13/2026): Advisory published.",
                    "title": "github - https://github.com/advisories/GHSA-334f-vvp4-7g6p"
                },
                {
                    "category": "description",
                    "text": "## Executive summary\n\nMicrosoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.SignalR.Common and Microsoft.AspNetCore.SignalR.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nSignalR stateful reconnect clients can indefinitely block broadcasts through `MessageBuffer.ResendAsync` backpressure and retain associated resources.\n\n## Announcement\n\nAnnouncement for this issue can be found at https://github.com/dotnet/announcements/issues/452\n\n## CVSS Details\n\n- **Version:** 3.1\n- **Severity:** High\n- **Score:** 7.5\n- **Vector:** `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`\n\n- **Weakness:** CWE-770 (Allocation of Resources Without Limits or Throttling)\n## Affected Platforms\n\n- **Platforms:** Windows, Linux, macOS\n- **Architectures:** All\n\n## <a name=\"affected-packages\"></a>Affected Packages\n\nThe vulnerability affects Microsoft .NET projects that use an affected package version listed below.\n\nPackage name | Affected version | Patched version\n------------ | ---------------- | ---------------\n[Microsoft.AspNetCore.SignalR.Common](https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Common) | >= 10.0.0, <= 10.0.12 | 10.0.13\n[Microsoft.AspNetCore.SignalR.Core](https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Core) | >= 1.0.0, <= 1.2.13 | 1.2.14\n[Microsoft.AspNetCore.SignalR.Common](https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Common) | >= 11.0.0-preview.5, <= 11.0.0-rc.1 | 11.0.0-rc.2\n[Microsoft.AspNetCore.SignalR.Common](https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Common) | >= 8.0.0, <= 8.0.31 | 8.0.32\n[Microsoft.AspNetCore.SignalR.Common](https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Common) | >= 9.0.0, <= 9.0.20 | 9.0.21\n\n## Advisory FAQ\n\n### <a name=\"how-affected\"></a>How do I know if I am affected?\n\nIf using a package listed in [affected packages](#affected-packages), you're exposed to the vulnerability.\n\n### <a name=\"how-fix\"></a>How do I fix the issue?\n\n1. To fix the issue please install the latest version of .NET. If you have installed one or more .NET SDKs through Visual Studio, Visual Studio will prompt you to update Visual Studio, which will also update your .NET SDKs.\n2. If your application references the vulnerable package, update the package reference to the patched version. You can list the versions you have installed by running the `dotnet --info` command.\n\nOnce you have installed the updated runtime or SDK, restart your apps for the update to take effect.\n\nAdditionally, if you've deployed [self-contained applications](https://docs.microsoft.com/dotnet/core/deploying/#self-contained-deployments-scd) targeting any of the impacted versions, these applications are also vulnerable and must be recompiled and redeployed.\n\n## Other Information\n\n### Reporting Security Issues\n\nIf you have found a potential security issue in a supported version of .NET, please report it to the Microsoft Security Response Center (MSRC) via the [MSRC Researcher Portal](https://msrc.microsoft.com/report/vulnerability/new). Further information can be found in the MSRC [Report an Issue FAQ](https://www.microsoft.com/msrc/faqs-report-an-issue).\n\nSecurity reports made through MSRC may qualify for the Microsoft .NET Bounty. Details of the Microsoft .NET Bounty Program including terms and conditions are at https://aka.ms/corebounty.\n\n### Support\n\nYou can ask questions about this issue on GitHub in the .NET GitHub organization. The main repos are located at https://github.com/dotnet/runtime. The Announcements repo (https://github.com/dotnet/Announcements) will contain this bulletin as an issue and will include a link to a discussion issue. You can ask questions in the linked discussion issue.\n\n### Disclaimer\n\nThe information provided in this advisory is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.\n\n### External Links\n\n[CVE-2026-70159](https://www.cve.org/CVERecord?id=CVE-2026-70159)\n\n### Acknowledgements\n\n- nono\n- Vincent55 Yang (https://vincent55.tw/)\n\n### Revisions\n\nV1.0 (10/13/2026): Advisory published.",
                    "title": "osvnuget - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/NuGet%2FGHSA-334f-vvp4-7g6p.json?alt=media"
                },
                {
                    "category": "description",
                    "text": "<p>Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p>\n",
                    "title": "microsoft - https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Oct"
                },
                {
                    "category": "other",
                    "text": "5.9",
                    "title": "NCSC Score"
                },
                {
                    "category": "other",
                    "text": "There is news data available from source Bleepingcomputer, There is product data available from source Certbundde, VENDOR FIX as product remediation category, Is related to (a version of) an uncommon product",
                    "title": "NCSC Score top increasing factors"
                },
                {
                    "category": "other",
                    "text": "There is cwe data available from source Nvd",
                    "title": "NCSC Score top decreasing factors"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-9691381",
                    "CSAFPID-9691382",
                    "CSAFPID-9691454",
                    "CSAFPID-9691455",
                    "CSAFPID-9691456",
                    "CSAFPID-9691457",
                    "CSAFPID-9691388",
                    "CSAFPID-9691391",
                    "CSAFPID-9692513",
                    "CSAFPID-9692514",
                    "CSAFPID-9692515",
                    "CSAFPID-9692516",
                    "CSAFPID-9692517",
                    "CSAFPID-9692518",
                    "CSAFPID-9692519",
                    "CSAFPID-9692520",
                    "CSAFPID-9692521",
                    "CSAFPID-9692522",
                    "CSAFPID-9692523",
                    "CSAFPID-9692524",
                    "CSAFPID-9692525",
                    "CSAFPID-9692526",
                    "CSAFPID-9692527",
                    "CSAFPID-9692528",
                    "CSAFPID-9692529",
                    "CSAFPID-9692530",
                    "CSAFPID-9692531",
                    "CSAFPID-9692532",
                    "CSAFPID-9692533",
                    "CSAFPID-9692534",
                    "CSAFPID-9692535",
                    "CSAFPID-9692536",
                    "CSAFPID-9692537",
                    "CSAFPID-9692538",
                    "CSAFPID-9692539",
                    "CSAFPID-9692540",
                    "CSAFPID-9692541",
                    "CSAFPID-9692542",
                    "CSAFPID-9692543",
                    "CSAFPID-9692544",
                    "CSAFPID-9692545",
                    "CSAFPID-9692546",
                    "CSAFPID-9692547",
                    "CSAFPID-9692548",
                    "CSAFPID-9692549",
                    "CSAFPID-9692550",
                    "CSAFPID-9692551",
                    "CSAFPID-9692552",
                    "CSAFPID-9692553",
                    "CSAFPID-9692554",
                    "CSAFPID-9692555",
                    "CSAFPID-9692556",
                    "CSAFPID-9692557",
                    "CSAFPID-9692558",
                    "CSAFPID-9692559",
                    "CSAFPID-9692560",
                    "CSAFPID-9692561",
                    "CSAFPID-9692562",
                    "CSAFPID-9692563",
                    "CSAFPID-9692564",
                    "CSAFPID-9692565",
                    "CSAFPID-9692566",
                    "CSAFPID-9692567",
                    "CSAFPID-9692568",
                    "CSAFPID-9692569",
                    "CSAFPID-9692570",
                    "CSAFPID-9692571",
                    "CSAFPID-9692572",
                    "CSAFPID-9692573",
                    "CSAFPID-9692574",
                    "CSAFPID-9692575",
                    "CSAFPID-9692576",
                    "CSAFPID-9692577",
                    "CSAFPID-9692578",
                    "CSAFPID-9692579",
                    "CSAFPID-9692580",
                    "CSAFPID-9692581",
                    "CSAFPID-9692582",
                    "CSAFPID-9692583",
                    "CSAFPID-9692584",
                    "CSAFPID-9692585",
                    "CSAFPID-9692586",
                    "CSAFPID-9692587",
                    "CSAFPID-9692588",
                    "CSAFPID-9692589",
                    "CSAFPID-9692590",
                    "CSAFPID-9692591",
                    "CSAFPID-9692592",
                    "CSAFPID-9692593",
                    "CSAFPID-9692594",
                    "CSAFPID-9692595",
                    "CSAFPID-9692596",
                    "CSAFPID-9692597",
                    "CSAFPID-9692598",
                    "CSAFPID-9692599",
                    "CSAFPID-5137200",
                    "CSAFPID-9692001",
                    "CSAFPID-9692902",
                    "CSAFPID-9692903",
                    "CSAFPID-9692904",
                    "CSAFPID-9692905",
                    "CSAFPID-9692906",
                    "CSAFPID-9692907",
                    "CSAFPID-9692908",
                    "CSAFPID-9692909",
                    "CSAFPID-9692910",
                    "CSAFPID-9692911",
                    "CSAFPID-9692912",
                    "CSAFPID-9692913",
                    "CSAFPID-9692914",
                    "CSAFPID-9692915",
                    "CSAFPID-9692916",
                    "CSAFPID-9692917",
                    "CSAFPID-9692918",
                    "CSAFPID-9692919",
                    "CSAFPID-9692920",
                    "CSAFPID-9692921",
                    "CSAFPID-9692922",
                    "CSAFPID-9692923",
                    "CSAFPID-9692924",
                    "CSAFPID-9692925",
                    "CSAFPID-1373382",
                    "CSAFPID-1373383",
                    "CSAFPID-1373384",
                    "CSAFPID-1373385",
                    "CSAFPID-1373389",
                    "CSAFPID-1373391",
                    "CSAFPID-1373392",
                    "CSAFPID-1373393",
                    "CSAFPID-2470409",
                    "CSAFPID-2470410",
                    "CSAFPID-5118936",
                    "CSAFPID-5118937",
                    "CSAFPID-5793557",
                    "CSAFPID-5810232",
                    "CSAFPID-5810233",
                    "CSAFPID-6042657",
                    "CSAFPID-8968691",
                    "CSAFPID-9164980",
                    "CSAFPID-9164981",
                    "CSAFPID-9696194",
                    "CSAFPID-9696195",
                    "CSAFPID-9696196",
                    "CSAFPID-9696197"
                ]
            },
            "references": [
                {
                    "category": "external",
                    "summary": "Source - ncscclear",
                    "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-70159"
                },
                {
                    "category": "external",
                    "summary": "Source - cveprojectv5",
                    "url": "https://www.cve.org/CVERecord?id=CVE-2026-70159"
                },
                {
                    "category": "external",
                    "summary": "Source - ncscclear",
                    "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426"
                },
                {
                    "category": "external",
                    "summary": "Source - nvd",
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70159"
                },
                {
                    "category": "external",
                    "summary": "Source - bleepingcomputer",
                    "url": "https://www.bleepingcomputer.com/news/microsoft/microsoft-october-2026-patch-tuesday-fixes-1-411-flaws-3-zero-days/"
                },
                {
                    "category": "external",
                    "summary": "Source - github",
                    "url": "https://github.com/advisories/GHSA-334f-vvp4-7g6p"
                },
                {
                    "category": "external",
                    "summary": "Source - osv",
                    "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/NuGet%2FGHSA-334f-vvp4-7g6p.json?alt=media"
                },
                {
                    "category": "external",
                    "summary": "Source - microsoft",
                    "url": "https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Oct"
                },
                {
                    "category": "external",
                    "summary": "Source - certbundde",
                    "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3893.json"
                },
                {
                    "category": "external",
                    "summary": "News - bleepingcomputer",
                    "url": "https://www.bleepingcomputer.com/news/microsoft/microsoft-october-2026-patch-tuesday-fixes-1-411-flaws-3-zero-days/"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde; cveprojectv5; nvd",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70159"
                },
                {
                    "category": "external",
                    "summary": "Reference - github; osv",
                    "url": "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-334f-vvp4-7g6p"
                },
                {
                    "category": "external",
                    "summary": "Reference - github; osv",
                    "url": "https://github.com/dotnet/announcements/issues/452"
                },
                {
                    "category": "external",
                    "summary": "Reference - github; osv",
                    "url": "https://github.com/dotnet/aspnetcore/discussions/69792"
                },
                {
                    "category": "external",
                    "summary": "Reference - github",
                    "url": "https://github.com/advisories/GHSA-334f-vvp4-7g6p"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3893.json"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3893"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69370"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102851"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70098"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102238"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102234"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102233"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102232"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102229"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102231"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102235"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108398"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58280"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85363"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69651"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96222"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84008"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70174"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102869"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70007"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96960"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97801"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70035"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83520"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96224"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96233"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96958"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96959"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97788"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100205"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105729"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105732"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70186"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70183"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70175"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70181"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88092"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96236"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70196"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70188"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96251"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96303"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87697"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96234"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96238"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96237"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96235"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70197"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96229"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96232"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66822"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105016"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96231"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96225"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70190"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70165"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70161"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70179"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70194"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70162"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92707"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96230"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96957"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-103572"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102870"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85790"
                },
                {
                    "category": "external",
                    "summary": "Reference - certbundde",
                    "url": "https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution/"
                }
            ],
            "remediations": [
                {
                    "category": "vendor_fix",
                    "details": "Release Notes",
                    "product_ids": [
                        "CSAFPID-5137200",
                        "CSAFPID-9692001"
                    ]
                },
                {
                    "category": "vendor_fix",
                    "details": "Release Notes",
                    "product_ids": [
                        "CSAFPID-9692902",
                        "CSAFPID-9692903",
                        "CSAFPID-9692904",
                        "CSAFPID-9692908",
                        "CSAFPID-9692909",
                        "CSAFPID-9692910",
                        "CSAFPID-9692914",
                        "CSAFPID-9692915",
                        "CSAFPID-9692916",
                        "CSAFPID-9692920",
                        "CSAFPID-9692921",
                        "CSAFPID-9692922"
                    ],
                    "url": "https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Common"
                },
                {
                    "category": "vendor_fix",
                    "details": "Release Notes",
                    "product_ids": [
                        "CSAFPID-9692905",
                        "CSAFPID-9692906",
                        "CSAFPID-9692907",
                        "CSAFPID-9692911",
                        "CSAFPID-9692912",
                        "CSAFPID-9692913",
                        "CSAFPID-9692917",
                        "CSAFPID-9692918",
                        "CSAFPID-9692919",
                        "CSAFPID-9692923",
                        "CSAFPID-9692924",
                        "CSAFPID-9692925"
                    ],
                    "url": "https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Core"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
                        "baseScore": 7.5,
                        "baseSeverity": "HIGH"
                    },
                    "products": [
                        "CSAFPID-1373382",
                        "CSAFPID-1373383",
                        "CSAFPID-1373384",
                        "CSAFPID-1373385",
                        "CSAFPID-1373389",
                        "CSAFPID-1373391",
                        "CSAFPID-1373392",
                        "CSAFPID-1373393",
                        "CSAFPID-2470409",
                        "CSAFPID-2470410",
                        "CSAFPID-5118936",
                        "CSAFPID-5118937",
                        "CSAFPID-5137200",
                        "CSAFPID-5793557",
                        "CSAFPID-5810232",
                        "CSAFPID-5810233",
                        "CSAFPID-6042657",
                        "CSAFPID-8968691",
                        "CSAFPID-9164980",
                        "CSAFPID-9164981",
                        "CSAFPID-9691381",
                        "CSAFPID-9691382",
                        "CSAFPID-9691388",
                        "CSAFPID-9691391",
                        "CSAFPID-9691454",
                        "CSAFPID-9691455",
                        "CSAFPID-9691456",
                        "CSAFPID-9691457",
                        "CSAFPID-9692001",
                        "CSAFPID-9692513",
                        "CSAFPID-9692514",
                        "CSAFPID-9692515",
                        "CSAFPID-9692516",
                        "CSAFPID-9692517",
                        "CSAFPID-9692518",
                        "CSAFPID-9692519",
                        "CSAFPID-9692520",
                        "CSAFPID-9692521",
                        "CSAFPID-9692522",
                        "CSAFPID-9692523",
                        "CSAFPID-9692524",
                        "CSAFPID-9692525",
                        "CSAFPID-9692526",
                        "CSAFPID-9692527",
                        "CSAFPID-9692528",
                        "CSAFPID-9692529",
                        "CSAFPID-9692530",
                        "CSAFPID-9692531",
                        "CSAFPID-9692532",
                        "CSAFPID-9692533",
                        "CSAFPID-9692534",
                        "CSAFPID-9692535",
                        "CSAFPID-9692536",
                        "CSAFPID-9692537",
                        "CSAFPID-9692538",
                        "CSAFPID-9692539",
                        "CSAFPID-9692540",
                        "CSAFPID-9692541",
                        "CSAFPID-9692542",
                        "CSAFPID-9692543",
                        "CSAFPID-9692544",
                        "CSAFPID-9692545",
                        "CSAFPID-9692546",
                        "CSAFPID-9692547",
                        "CSAFPID-9692548",
                        "CSAFPID-9692549",
                        "CSAFPID-9692550",
                        "CSAFPID-9692551",
                        "CSAFPID-9692552",
                        "CSAFPID-9692553",
                        "CSAFPID-9692554",
                        "CSAFPID-9692555",
                        "CSAFPID-9692556",
                        "CSAFPID-9692557",
                        "CSAFPID-9692558",
                        "CSAFPID-9692559",
                        "CSAFPID-9692560",
                        "CSAFPID-9692561",
                        "CSAFPID-9692562",
                        "CSAFPID-9692563",
                        "CSAFPID-9692564",
                        "CSAFPID-9692565",
                        "CSAFPID-9692566",
                        "CSAFPID-9692567",
                        "CSAFPID-9692568",
                        "CSAFPID-9692569",
                        "CSAFPID-9692570",
                        "CSAFPID-9692571",
                        "CSAFPID-9692572",
                        "CSAFPID-9692573",
                        "CSAFPID-9692574",
                        "CSAFPID-9692575",
                        "CSAFPID-9692576",
                        "CSAFPID-9692577",
                        "CSAFPID-9692578",
                        "CSAFPID-9692579",
                        "CSAFPID-9692580",
                        "CSAFPID-9692581",
                        "CSAFPID-9692582",
                        "CSAFPID-9692583",
                        "CSAFPID-9692584",
                        "CSAFPID-9692585",
                        "CSAFPID-9692586",
                        "CSAFPID-9692587",
                        "CSAFPID-9692588",
                        "CSAFPID-9692589",
                        "CSAFPID-9692590",
                        "CSAFPID-9692591",
                        "CSAFPID-9692592",
                        "CSAFPID-9692593",
                        "CSAFPID-9692594",
                        "CSAFPID-9692595",
                        "CSAFPID-9692596",
                        "CSAFPID-9692597",
                        "CSAFPID-9692598",
                        "CSAFPID-9692599",
                        "CSAFPID-9692902",
                        "CSAFPID-9692903",
                        "CSAFPID-9692904",
                        "CSAFPID-9692905",
                        "CSAFPID-9692906",
                        "CSAFPID-9692907",
                        "CSAFPID-9692908",
                        "CSAFPID-9692909",
                        "CSAFPID-9692910",
                        "CSAFPID-9692911",
                        "CSAFPID-9692912",
                        "CSAFPID-9692913",
                        "CSAFPID-9692914",
                        "CSAFPID-9692915",
                        "CSAFPID-9692916",
                        "CSAFPID-9692917",
                        "CSAFPID-9692918",
                        "CSAFPID-9692919",
                        "CSAFPID-9692920",
                        "CSAFPID-9692921",
                        "CSAFPID-9692922",
                        "CSAFPID-9692923",
                        "CSAFPID-9692924",
                        "CSAFPID-9692925",
                        "CSAFPID-9696194",
                        "CSAFPID-9696195",
                        "CSAFPID-9696196",
                        "CSAFPID-9696197"
                    ]
                }
            ],
            "threats": [
                {
                    "category": "exploit_status",
                    "details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely",
                    "product_ids": [
                        "CSAFPID-5137200",
                        "CSAFPID-9692001",
                        "CSAFPID-9692902",
                        "CSAFPID-9692903",
                        "CSAFPID-9692904",
                        "CSAFPID-9692905",
                        "CSAFPID-9692906",
                        "CSAFPID-9692907",
                        "CSAFPID-9692908",
                        "CSAFPID-9692909",
                        "CSAFPID-9692910",
                        "CSAFPID-9692911",
                        "CSAFPID-9692912",
                        "CSAFPID-9692913",
                        "CSAFPID-9692914",
                        "CSAFPID-9692915",
                        "CSAFPID-9692916",
                        "CSAFPID-9692917",
                        "CSAFPID-9692918",
                        "CSAFPID-9692919",
                        "CSAFPID-9692920",
                        "CSAFPID-9692921",
                        "CSAFPID-9692922",
                        "CSAFPID-9692923",
                        "CSAFPID-9692924",
                        "CSAFPID-9692925"
                    ]
                },
                {
                    "category": "impact",
                    "details": "Denial of Service",
                    "product_ids": [
                        "CSAFPID-5137200",
                        "CSAFPID-9692001",
                        "CSAFPID-9692902",
                        "CSAFPID-9692903",
                        "CSAFPID-9692904",
                        "CSAFPID-9692905",
                        "CSAFPID-9692906",
                        "CSAFPID-9692907",
                        "CSAFPID-9692908",
                        "CSAFPID-9692909",
                        "CSAFPID-9692910",
                        "CSAFPID-9692911",
                        "CSAFPID-9692912",
                        "CSAFPID-9692913",
                        "CSAFPID-9692914",
                        "CSAFPID-9692915",
                        "CSAFPID-9692916",
                        "CSAFPID-9692917",
                        "CSAFPID-9692918",
                        "CSAFPID-9692919",
                        "CSAFPID-9692920",
                        "CSAFPID-9692921",
                        "CSAFPID-9692922",
                        "CSAFPID-9692923",
                        "CSAFPID-9692924",
                        "CSAFPID-9692925"
                    ]
                },
                {
                    "category": "exploit_status",
                    "details": "exploited"
                }
            ],
            "title": "CVE-2026-70159"
        }
    ]
}