Medium · published September 8, 2026
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/asp.net_core | ≥ 8.0.0, < 8.0.28 | 8.0.28 |
| microsoft/asp.net_core | ≥ 9.0.0, < 9.0.17 | 9.0.17 |
| microsoft/asp.net_core | ≥ 10.0.0, < 10.0.9 | 10.0.9 |
| microsoft/asp.net_core | > 11.0.0 | — |
| microsoft/asp.net_core | all versions | — |
| microsoft/visual_studio_2022 | ≥ 17.14.0, < 17.14.40 | 17.14.40 |
| microsoft/visual_studio_2026 | ≥ 18.9.0, < 18.9.3 | 18.9.3 |
| microsoft/.net | ≥ 8.0.0, < 8.0.31 | 8.0.31 |
| microsoft/.net | ≥ 9.0.0, < 9.0.20 | 9.0.20 |
| microsoft/.net | ≥ 10.0.0, < 10.0.12 | 10.0.12 |