16 Pull requests merged by 9 people

• Bump form-data from 4.0.2 to 4.0.4

  #63312 merged Aug 20, 2025

• Initialize hosting trace with OTEL tags for sampling

  #62090 merged Aug 19, 2025

• [release/10.0-rc1] Model nullable types using oneOf in OpenAPI schema

  #63325 merged Aug 19, 2025

• Empty "http.route" tags should be set to "/"

  #62432 merged Aug 19, 2025

• [main] Update dependencies from dotnet/extensions

  #63302 merged Aug 19, 2025

• Fix memory leak in IIS StartupHook by properly disposing PhysicalFileProvider

  #63322 merged Aug 19, 2025

• [main] Source code updates from dotnet/dotnet

  #63324 merged Aug 19, 2025

• [main] (deps): Bump src/submodules/googletest from 373af2e to 244cec8

  #63272 merged Aug 19, 2025

• Model nullable types using oneOf in OpenAPI schema

  #63301 merged Aug 19, 2025

• Added string arrays to simple binding

  #63072 merged Aug 18, 2025

• [10.0-rc1] Mop up changes that missed the RC1 snap

  #63318 merged Aug 18, 2025

• Add servicing-consider label to 10.0 PRs

  #63319 merged Aug 18, 2025

• [release/10.0] Update dependencies from dnceng/internal/dotnet-optimization

  #63305 merged Aug 18, 2025

• [release/10.0] Update dependencies from dotnet/extensions

  #63307 merged Aug 18, 2025

• [release/10.0-rc1] Source code updates from dotnet/dotnet

  #63293 merged Aug 18, 2025

• [main] Update dependencies from dnceng/internal/dotnet-optimization

  #63306 merged Aug 18, 2025

12 Pull requests opened by 6 people

• Resolve concurrency with test stub to resolve #49745.

  #63299 opened Aug 17, 2025

• [release/9.0] Update dependencies from dotnet/extensions

  #63303 opened Aug 18, 2025

• [release/9.0] Update dependencies from dotnet/arcade

  #63304 opened Aug 18, 2025

• Fix memory leaks in CertificateManager by improving certificate disposal patterns

  #63321 opened Aug 18, 2025

• Fix SetCookieHeaderValue.TryParse throwing ArgumentOutOfRangeException for Max-Age overflow

  #63323 opened Aug 18, 2025

• [release/10.0] Source code updates from dotnet/dotnet

  #63327 opened Aug 19, 2025

• [release/10.0-rc1] Source code updates from dotnet/dotnet

  #63328 opened Aug 19, 2025

• Fixes in PrefixResolver

  #63334 opened Aug 19, 2025

• [release/10.0] Bump form-data from 4.0.2 to 4.0.4

  #63335 opened Aug 19, 2025

• [release/10.0-rc1] Empty "http.route" tags should be set to "/"

  #63336 opened Aug 19, 2025

• [release/10.0-rc1] Initialize hosting trace with OTEL tags for sampling

  #63338 opened Aug 19, 2025

• remove 2.1 mention

  #63339 opened Aug 19, 2025

27 Issues closed by 12 people

• Build *sporadically* fails with Microsoft.NET.Sdk.StaticWebAssets.Compression.targets: error : IOException: The process cannot access the file (..) because it is being used by another process

  #62565 closed Aug 20, 2025

• Microsoft.AspNetCore.OpenApi does not render schema when a Type is reused

  #63054 closed Aug 19, 2025

• Allow additional Tags for activity creation

  #50488 closed Aug 19, 2025

• HostingMetrics: empty "http.route" tags shouldn't be present

  #62431 closed Aug 19, 2025

• Possible memory leak in IIS when StartupHook initializes

  #59524 closed Aug 19, 2025

• Implementing RendererInfo with Enum

  #63315 closed Aug 19, 2025

• UseSolutionRelativeContentRoot overloads to support slnx discovery

  #63131 closed Aug 19, 2025

• Crash InvalidOperationException: 'overlapped' has already been freed.

  #61899 closed Aug 19, 2025

• ASP.NET HTTP Response Time takes +30 seconds if lock is used

  #60933 closed Aug 19, 2025

• .NET Hosting Bundle 6.0.32 missing dotnet-host-6.0.32-win-x64.msi from Package Cache

  #62232 closed Aug 19, 2025

• "The path is not of a legal form" error when adding ASP.NET Core Angular project to existing solution

  #62227 closed Aug 19, 2025

• Store "Configure Multiple Startup Projects" settings on the SLN file itself

  #61250 closed Aug 19, 2025

• IOutboundParameterTransformer removed in a version that only updated the Minor version 2.2.0 to 2.3.0 but also seems to appear in main branch in same place

  #60715 closed Aug 19, 2025

• 为什么ASP.NET Core没有英文对应的简体中文注释？

  #61423 closed Aug 19, 2025

• Support of \r\n characters in HTTP Headers as per HTTP 1.1 as per RFC 2616 sec 2.2

  #61472 closed Aug 18, 2025

• CVE-2018-8292 Explanation

  #61197 closed Aug 18, 2025

• AspNetCoreModuleV2 deployment issues after installing .NET 9 runtime on server

  #60541 closed Aug 18, 2025

• ASP.NET Core 2.1 becomes ASP.NET Core 2.3

  #58598 closed Aug 18, 2025

• InvalidOperationException when using string[] parameters with FromForm attribute

  #62326 closed Aug 18, 2025

• Razor Pages equivalent of ViewComponents

  #63273 closed Aug 18, 2025

• Minimal does not set response type nullability

  #58681 closed Aug 18, 2025

• .NET 9 OpenAPI incorrect schema for array of nullable strings

  #60803 closed Aug 18, 2025

• Minimal API Validation includes validation for service provider service

  #63289 closed Aug 17, 2025

• .Net 9 Blazor MapStaticFiles unusable

  #61008 closed Aug 17, 2025

• Request QueryString key names became case-sensitive

  #63298 closed Aug 17, 2025

• Perf regression: single_query

  #63282 closed Aug 17, 2025

• Perf improvement: updates

  #63294 closed Aug 17, 2025

17 Issues opened by 13 people

• Couldn't find a valid ICU package installed on the system

  #63337 opened Aug 19, 2025

• SignalR client hanging on reconnections

  #63333 opened Aug 19, 2025

• [Templates] Consider calling `Shortcircuit()` by default on the templates after `MapStaticAssets()`

  #63332 opened Aug 19, 2025

• ProblemDetails payload differs between Development and custom environment for JSON model-binding failure (Minimal APIs + AddProblemDetails + UseExceptionHandler)

  #63331 opened Aug 19, 2025

• Kestrel doesn't respond to HTTP3 request on udp

  #63330 opened Aug 19, 2025

• [Blazor] PersistentState design question

  #63329 opened Aug 19, 2025

• Make QuickGrid more inheritance friendly (second try)

  #63326 opened Aug 19, 2025

• MapStaticAssets returns incorrect Content-Length for custom Range

  #63320 opened Aug 18, 2025

• [Blazor] SetParametersAsync called multiple times with the same non-mutable parameters

  #63314 opened Aug 18, 2025

• [SignalR] Blazor's Activity.Current is null when executing a HubMethod

  #63313 opened Aug 18, 2025

• Confusing model binding / model validation behavior related to [Required] and value types

  #63311 opened Aug 18, 2025

• Perf regression: fortunes

  #63310 opened Aug 18, 2025

• Perf regression: fortunes, fortunes_ef, https

  #63309 opened Aug 18, 2025

• Perf improvement: fortunes_dapper

  #63308 opened Aug 18, 2025

• Perf improvement: fortunes, json_middleware

  #63300 opened Aug 17, 2025

• Perf improvement: json

  #63297 opened Aug 17, 2025

• UserManager.AddToRoleAsync() will throw InvalidOperationException because of entity already tracked

  #63296 opened Aug 17, 2025

157 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Fix timezone issue in dev-certs: use DateTimeOffset.UtcNow instead of DateTimeOffset.Now

  #63285 commented on Aug 19, 2025 • 2 new comments

• SignalR - Getting user claims through dependency injection

  #53014 commented on Aug 18, 2025 • 0 new comments

• HeaderDictionary.Enumerator.Reset() does not work.

  #61699 commented on Aug 18, 2025 • 0 new comments

• [hot-refresh] WebSocket connection to 'ws://localhost:50417/' failed: Error in connection establishment: net::ERR_CONNECTION_REFUSED

  #61646 commented on Aug 18, 2025 • 0 new comments

• Microsoft.Net.Http.Headers.SetCookieHeaderValue.TryParse throws System.ArgumentOutOfRangeException

  #61735 commented on Aug 18, 2025 • 0 new comments

• Race Condition in SQL Server Distributed Cache with Transactional Operations

  #60923 commented on Aug 18, 2025 • 0 new comments

• [Breaking change]: Http logging in dotnet 8 doesn't work without call AddHttpLogging

  #60886 commented on Aug 18, 2025 • 0 new comments

• Yarp need to be configured explicitly for @react-refresh

  #63258 commented on Aug 19, 2025 • 0 new comments

• 9.0.6 throws PendingModelChangesWarning with IdentityDbContext<T>

  #62501 commented on Aug 19, 2025 • 0 new comments

• OpenApi doc is not generated at build time

  #61471 commented on Aug 19, 2025 • 0 new comments

• Error testing from CLI

  #63128 commented on Aug 19, 2025 • 0 new comments

• Global helpers

  #60755 commented on Aug 19, 2025 • 0 new comments

• Bad wwwroot path in Blazor 9 with ubuntu 24 and ProcessStartInfo

  #63295 commented on Aug 19, 2025 • 0 new comments

• Obsolete WebHostBuilder

  #20964 commented on Aug 19, 2025 • 0 new comments

• Obsolete WebHost and introduce an Analyzer to help migrate from it

  #27528 commented on Aug 19, 2025 • 0 new comments

• OpenAPI metadata/annotations added by [Attributes] are overwritten by XML Comments

  #63179 commented on Aug 19, 2025 • 0 new comments

• Antiforgery validation failure returns 400 Bad Request for Controllers and 500 Internal Server Error for minimal APIs

  #58441 commented on Aug 19, 2025 • 0 new comments

• Parameterise the Prometheus Data Source in Grafana Dashboards

  #60204 commented on Aug 19, 2025 • 0 new comments

• Quarantine Microsoft.AspNetCore.Components.RevalidatingServerAuthenticationStateProviderTest.SuppliesCancellationTokenThatSignalsWhenRevalidationLoopIsBeingDiscarded

  #60472 commented on Aug 19, 2025 • 0 new comments

• Retry `Microsoft.AspNetCore.Identity.EntityFrameworkCore.Test.ProtectedUserStoreTest.PhoneFactorFailsAfterSecurityStampChangeTest`

  #58231 commented on Aug 19, 2025 • 0 new comments

• Quarantine ServerFormsTest.CanWireUpINotifyPropertyChangedToEditContext

  #62386 commented on Aug 19, 2025 • 0 new comments

• TimingPipeFlusher.FlushAsync Kestrel exception running inside Aspire with Orleans

  #60825 commented on Aug 18, 2025 • 0 new comments

• Microsoft.AspNetCore.Connections.ConnectionResetException

  #45086 commented on Aug 18, 2025 • 0 new comments

• Quarantine Http2_RequestWithDataAndContentLength_Success(method: "PATCH")

  #63266 commented on Aug 18, 2025 • 0 new comments

• Postman POST request never hits controller endpoint!

  #62264 commented on Aug 18, 2025 • 0 new comments

• Shadow Copy - unclear and/or misleading errors

  #62148 commented on Aug 18, 2025 • 0 new comments

• IIS Shadow Copy - bug - The last numbered folder inside the Shadow Copy Directory is reused and keeps old artifacts

  #62567 commented on Aug 18, 2025 • 0 new comments

• Surface the _numItems as a public property on DefaultObjectPool

  #61029 commented on Aug 18, 2025 • 0 new comments

• Add support in Kestrel to configure signature algorithms and cipher suites on a per-SNI basis.

  #58560 commented on Aug 18, 2025 • 0 new comments

• AddApiVersioning with a custom IProblemDetailsWriter breaks both the custom and decorated IProblemDetailsWriter

  #62186 commented on Aug 18, 2025 • 0 new comments

• SqlServer Distributed cache: Allow application to handle DuplicateKeyException

  #61884 commented on Aug 18, 2025 • 0 new comments

• Kestrel HTTP3 endpoint validate server name for client certificate by default

  #61767 commented on Aug 18, 2025 • 0 new comments

• Extend HttpLogging & W3C logging middleware to have a custom callback that can supply extra fields for the log.

  #60817 commented on Aug 18, 2025 • 0 new comments

• Unable to have scoped dependency using constructor injection for convention-based middleware

  #61001 commented on Aug 18, 2025 • 0 new comments

• Default model binding for form requests consumes body automatically, causing Request Forwarding Issues

  #61043 commented on Aug 18, 2025 • 0 new comments

• Kestrel on linux logs a first chance exception with every EC2 health check request

  #61081 commented on Aug 18, 2025 • 0 new comments

• The right way of getting http request body from metric handler

  #61347 commented on Aug 18, 2025 • 0 new comments

• Microsoft.AspNetCore.Builder.IISServerOptions Class not existing in 9.0.103 (Linux)

  #60892 commented on Aug 18, 2025 • 0 new comments

• OutputCache causes UnobservedTaskException

  #61628 commented on Aug 18, 2025 • 0 new comments

• Restart application gives HttpSysException The prefix is already registered

  #60107 commented on Aug 18, 2025 • 0 new comments

• Permformance issue with `StaticAssetDevelopmentRuntimeHandler.EnableSupport`.

  #59673 commented on Aug 19, 2025 • 0 new comments

• WebApplicationFactory disposes host before StopAsync on background service is called

  #57738 commented on Aug 19, 2025 • 0 new comments

• Critical Bug: Blazor Server @onclick events do not fire on new projects with recent .NET 8 SDKs.

  #63205 commented on Aug 19, 2025 • 0 new comments

• Helix failure `EPT_S_NOT_REGISTERED`

  #57416 commented on Aug 20, 2025 • 0 new comments

• Known Build Error: error : Cannot create a file when that file already exists.

  #61178 commented on Aug 20, 2025 • 0 new comments

• Known Build Error: ProcessBufferedRenderBatches_WritesRenders fails

  #61807 commented on Aug 20, 2025 • 0 new comments

• [Known Build Error] Failed webcil conversion: image is too small

  #61987 commented on Aug 20, 2025 • 0 new comments

• [Known Build Error] Ssl connection could not be established

  #62008 commented on Aug 20, 2025 • 0 new comments

• [Known Build Error] `QuicConnectionContextTests.StreamPool_Heartbeat_ExpiredStreamRemoved`

  #62308 commented on Aug 20, 2025 • 0 new comments

• [Known Build Error] `NavigationException_InAsyncContext_DoesNotBecomeUnobservedTaskException` fails with `ObjectDisposedException`

  #62672 commented on Aug 20, 2025 • 0 new comments

• Known Build Error: Could not copy

  #62807 commented on Aug 20, 2025 • 0 new comments

• [Known build issue] `Interop.FunctionalTest` fail

  #63147 commented on Aug 20, 2025 • 0 new comments

• [10.0.100-preview.7.25380.108] UmbracoCMS failed to load resource: the server responded with a status of 401()

  #63093 commented on Aug 20, 2025 • 0 new comments

• Fix RequestDelegateFactory to handle nullable types correctly in empty request body scenarios

  #62861 commented on Aug 19, 2025 • 0 new comments

• feat: "Spanify" DataProtector

  #62903 commented on Aug 18, 2025 • 0 new comments

• Added usage of TimeProvider instead of DateTimeOffset

  #63042 commented on Aug 18, 2025 • 0 new comments

• Fix typo in DataProtectionBuilderExtensions.cs

  #63226 commented on Aug 19, 2025 • 0 new comments

• Add QUERY to known HTTP methods in HostingMetrics

  #63276 commented on Aug 20, 2025 • 0 new comments

• Fix help option formatting to use comma-space separator instead of pipe

  #63284 commented on Aug 19, 2025 • 0 new comments

• [Validation] Use [JsonPropertyName] for display name

  #63291 commented on Aug 18, 2025 • 0 new comments

• AmbiguousMatchException thrown when using required route constraint

  #62278 commented on Aug 19, 2025 • 0 new comments

• MapStaticAssets not behaving like UseStaticFiles middleware resulting in entire pipeline being run for every static asset - massively slow.

  #59315 commented on Aug 19, 2025 • 0 new comments

• Populate OTel Schema URL on Activity Sources and Meters

  #60729 commented on Aug 19, 2025 • 0 new comments

• OpenApiSchema.AnyOf will reuse same key for schema

  #63233 commented on Aug 19, 2025 • 0 new comments

• Why do a large number of API interfaces occasionally respond slowly?

  #62513 commented on Aug 19, 2025 • 0 new comments

• Should Microsoft.Extensions.Http.Polly be deprecated in favour of Microsoft.Extensions.Http.Resilience?

  #57209 commented on Aug 19, 2025 • 0 new comments

• ASP.NET Core starts streaming API reviews

  #60003 commented on Aug 19, 2025 • 0 new comments

• [NativeAOT] Publishing with NativeAOT and trimming results in broken code

  #58509 commented on Aug 19, 2025 • 0 new comments

• Error when loading test.html using MapStaticAssets: Failed to load resource: net::ERR_CONTENT_DECODING_FAILED

  #58940 commented on Aug 19, 2025 • 0 new comments

• [Infrastructure] Update NPM dependencies as part of build-ops

  #52966 commented on Aug 19, 2025 • 0 new comments

• ASP.NET Core Identity and Auth documentation improvements

  #59290 commented on Aug 19, 2025 • 0 new comments

• context.ProtocolMessage.Prompt is not working on Microsoft.AspNetCore.Authentication.OpenIdConnect

  #61820 commented on Aug 19, 2025 • 0 new comments

• Angular and ASP.NET Core Template fails on creation

  #62258 commented on Aug 19, 2025 • 0 new comments

• [WiX 5] Migrate ASP.NET Core, ANCM installers

  #62430 commented on Aug 19, 2025 • 0 new comments

• Model nullable types using allOf in JSON schema

  #63029 commented on Aug 19, 2025 • 0 new comments

• Add manual E2E test scenarios for passkey creation and login

  #62457 commented on Aug 19, 2025 • 0 new comments

• Add framework assemblies to OpenAPI XML generator

  #63176 commented on Aug 19, 2025 • 0 new comments

• Obsolete ResponseCaching

  #62728 commented on Aug 19, 2025 • 0 new comments

• [Blazor] Improve authentification and usage of web apis

  #61501 commented on Aug 19, 2025 • 0 new comments

• AccessTokenFactory improvement options

  #56290 commented on Aug 18, 2025 • 0 new comments

• Expose more groups features in signalR

  #55165 commented on Aug 18, 2025 • 0 new comments

• Filter Outgoing Invocations in SignalR

  #48401 commented on Aug 18, 2025 • 0 new comments

• SignalR Java Client 9.0.4: Memory leak in stream() method due to unbounded ReplaySubject

  #63134 commented on Aug 18, 2025 • 0 new comments

• SignalR - Browser/TypeScript client - the Server-Sent Event keep alive ping fails to renew the access token if a 401 Unauthorized happens on the ping

  #56494 commented on Aug 18, 2025 • 0 new comments

• AddStackExchangeRedis doesn't read Aspire connection string

  #62543 commented on Aug 18, 2025 • 0 new comments

• Support async generator based streaming API in javascript

  #60585 commented on Aug 18, 2025 • 0 new comments

• [Android]MessagePack Exception:The transport does not support the 'Binary' transfer

  #57802 commented on Aug 18, 2025 • 0 new comments

• WebSocket Errors Are Not Properly Handled in Safari Leading to Random Disconnects

  #58336 commented on Aug 18, 2025 • 0 new comments

• Discrepancy between SignalRConnectionInfo & object that is needed for the @microsoft/signalr lib

  #57566 commented on Aug 18, 2025 • 0 new comments

• The `NegotiationResponse` object is incorrectly deserialized with the `NegotiateProtocol.ParseResponse` API

  #60935 commented on Aug 18, 2025 • 0 new comments

• Does @microsoft/signalr support react-native?

  #60606 commented on Aug 18, 2025 • 0 new comments

• IInvocationBinder throws or returns empty array inconsistently

  #63084 commented on Aug 18, 2025 • 0 new comments

• The SendConfirmationLinkAsync is sending confirmationLink to non-public address

  #63142 commented on Aug 18, 2025 • 0 new comments

• Consider obsoleting Bootstrap 4 support in the default Identity UI package

  #63191 commented on Aug 18, 2025 • 0 new comments

• Ensure the contrast between foreground and background colors meets WCAG 2 AA minimum contrast ratio thresholds (a[href$="Downloads/"]): A11y_ASP.NETCore_Index_AI4W.

  #62856 commented on Aug 18, 2025 • 0 new comments

• Quarantine RunAsync_WaitsForCompletion_Single_RegistrationParameters

  #49745 commented on Aug 18, 2025 • 0 new comments

• Multiple files upload hangs the process in a blazor server app

  #47301 commented on Aug 18, 2025 • 0 new comments

• .NET 9 on IIS 10 [I also don't know what to call this error]

  #59407 commented on Aug 18, 2025 • 0 new comments

• Support for Demonstrating Proof of Possession (DPoP) authorization tokens

  #58016 commented on Aug 17, 2025 • 0 new comments

• Minimal API Validation should respect [JsonPropertyName]

  #63290 commented on Aug 17, 2025 • 0 new comments

• Bazor policies based new methode will not working

  #63067 commented on Aug 18, 2025 • 0 new comments

• OpenIdConnectHandler ClaimActions not working

  #62930 commented on Aug 18, 2025 • 0 new comments

• Unable to send large byte array from the server to the client in Blazor

  #62477 commented on Aug 18, 2025 • 0 new comments

• Asp.Net Core attribute validation does not work on polymorphic properties

  #54070 commented on Aug 18, 2025 • 0 new comments

• Router incorrectly calls SetParametersAsync multiple times

  #44781 commented on Aug 18, 2025 • 0 new comments

• Blazor Hot Reload not working [JSInvokableAttribute("ApplyHotReloadDeltas")] error

  #61796 commented on Aug 18, 2025 • 0 new comments

• [SignalR] Server stops sending ping message to the client

  #47327 commented on Aug 18, 2025 • 0 new comments

• SignalR SauceLab tests no longer running

  #54218 commented on Aug 18, 2025 • 0 new comments

• Throw custom error types instead of generic errors inside the HubConnection class

  #48362 commented on Aug 18, 2025 • 0 new comments

• SignalR - SSE/LongPoll Close connection returns 404

  #55750 commented on Aug 18, 2025 • 0 new comments

• Call `onClosed` or provide an `onStopped` method to be called when the connection is stopped in certain cases

  #55765 commented on Aug 18, 2025 • 0 new comments

• Add activities to SignalR invocations

  #51557 commented on Aug 18, 2025 • 0 new comments

• Update SignalR TransportProtocols doc

  #53103 commented on Aug 18, 2025 • 0 new comments

• Select the protocol to be used by Signalr

  #55210 commented on Aug 18, 2025 • 0 new comments

• Allow overriding SignalR's Redis backplane channel's prefix instead of relying on hub class' name

  #49457 commented on Aug 18, 2025 • 0 new comments

• Signalr typescript client provide stream to AsyncGenerator in additional to IStreamResult<T>

  #47840 commented on Aug 18, 2025 • 0 new comments

• [SignalR] Avoid initial memory allocation in ChannelBasedSemaphore

  #47588 commented on Aug 18, 2025 • 0 new comments

• Allow for SignalR Clients to Handle Unregistered Handlers

  #48747 commented on Aug 18, 2025 • 0 new comments

• After migrating from .NET 8 to .NET 9, the application crashes when I send a request to the CoreWCF server from a .NET 9 client application.

  #59420 commented on Aug 18, 2025 • 0 new comments

• Add docs on how to publish ASP.NET Core apps to Linux using Apache

  #59587 commented on Aug 18, 2025 • 0 new comments

• Polly context setter and getter use obsolete property from HttpRequestMessage

  #59833 commented on Aug 18, 2025 • 0 new comments

• possible memleak in internal CertificateManager

  #59538 commented on Aug 18, 2025 • 0 new comments

• [.NET 8] BackgroundService stops working after a while

  #60052 commented on Aug 18, 2025 • 0 new comments

• autogenerated files by Microsoft Visual C++ that may can be deleted

  #58632 commented on Aug 18, 2025 • 0 new comments

• Microsoft Security Advisory CVE-2025-26682: .NET Denial of Service Vulnerability

  #61390 commented on Aug 18, 2025 • 0 new comments

• Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability

  #58297 commented on Aug 18, 2025 • 0 new comments

• Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability

  #57317 commented on Aug 18, 2025 • 0 new comments

• ASP.NET Core Roadmap for .NET 10

  #59443 commented on Aug 18, 2025 • 0 new comments

• Close kestrel https connections using old certificate versions

  #60380 commented on Aug 18, 2025 • 0 new comments

• listener port specified in appsetting.json file is not getting overridden by either ASPNETCORE_URLS or --urls options for asp.net core application

  #60066 commented on Aug 18, 2025 • 0 new comments

• DevServer package "Process with an Id of XXXXX is not running." regression

  #59888 commented on Aug 18, 2025 • 0 new comments

• Feature to control whether the Kestrel server includes the Date header

  #60152 commented on Aug 18, 2025 • 0 new comments

• Consider deprecating more things in SpaServices.Extensions

  #39160 commented on Aug 18, 2025 • 0 new comments

• `TypeLoadException`s on .NET 9 when referencing HttpSys on Linux

  #59166 commented on Aug 18, 2025 • 0 new comments

• System.NotSupportedException: No data is available for encoding 1252 in .NET Core

  #60706 commented on Aug 18, 2025 • 0 new comments

• Intellisense Files Missing Corresponding DLLs in Microsoft.AspNetCore.App.Ref

  #60221 commented on Aug 18, 2025 • 0 new comments

• Adding a diagnostic mode that turns on more activities in ASP.NET

  #60956 commented on Aug 18, 2025 • 0 new comments

• Workflow for running .Net Core 8 Angular SPA locally in prod mode

  #62557 commented on Aug 18, 2025 • 0 new comments

• Re-evaluate HTTP/3 defaults in .NET 10

  #52741 commented on Aug 18, 2025 • 0 new comments

• `ValidateOnStartup` does not work when using `WebHost.CreateDefaultBuilder`

  #58100 commented on Aug 18, 2025 • 0 new comments

• Application DLL cannot be loaded once hosting model is switched OutOfProcess

  #57949 commented on Aug 18, 2025 • 0 new comments

• Allow running two IServer implementations side by side

  #58288 commented on Aug 18, 2025 • 0 new comments

• app.UseRequestLocalization overwritten on deployed IIS

  #58440 commented on Aug 18, 2025 • 0 new comments

• Per file size limit in multipart form

  #58225 commented on Aug 18, 2025 • 0 new comments

• Microsoft.AspNetCore.WebUtilities: FileMultipartSection.FileStream.Length is missing value initially

  #58555 commented on Aug 18, 2025 • 0 new comments

• While trying to run on WSL "Failed exporting the certificate"

  #58599 commented on Aug 18, 2025 • 0 new comments

• Http1OutputProducer does not handle GetSpan/GetMemory(sizeHint: 0) correctly

  #58644 commented on Aug 18, 2025 • 0 new comments

• Expires header set to '-1' automatically when writing to HttpResponse.Body in IExceptionHandler.TryHandleAsync() method.

  #58655 commented on Aug 18, 2025 • 0 new comments

• Support `connection_reset` with HTTP/1.1

  #58885 commented on Aug 18, 2025 • 0 new comments

• Regression: ANCM: Unexpected application shutdown

  #58939 commented on Aug 18, 2025 • 0 new comments

• Make session related libraries trimmable

  #58787 commented on Aug 18, 2025 • 0 new comments

• Allow custom response body streaming of HTTP Responses without Transfer-Encoding or Content-Length set

  #59055 commented on Aug 18, 2025 • 0 new comments

• Nuget package injects global usings

  #59209 commented on Aug 18, 2025 • 0 new comments

• Items with configured expiration stored in IDistributedCache (using RedisCache) end up non-expiring in Redis

  #59211 commented on Aug 18, 2025 • 0 new comments

• APP_POOL_ID environment variable is null when Preload = True

  #59213 commented on Aug 18, 2025 • 0 new comments

• Improve systemd socket activation endpoint handling in Kestrel

  #59374 commented on Aug 18, 2025 • 0 new comments

• Add flexibility for versioned secrets to KeyPerFileConfigurationProvider/Source

  #59464 commented on Aug 18, 2025 • 0 new comments