Public records › Security advisories (GitHub reviewed)
Recorded November 12, 2026 by the Flare Reef watcher from GitHub's history

November 11, 2026

November 11, 2026

November 11, 2026

On November 11, 2026, GitHub's security advisory list published 24 new advisories, changed 0, and withdrew 0. A security advisory is a public warning about a hole in a piece of software.

  • GHSA-q7j6-px74-p2vw
    NuGet · Microsoft[.]DotNet[.]HotReload[.]Watch[.]Aspire · MODERATE · Microsoft Security Advisory CVE-2026-114155 - .NET Elevation of Privilege Vulnerability
    Advisory · The commit · The file
  • GHSA-5h82-77p6-2wp3
    NuGet · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x86 · MODERATE · Microsoft Security Advisory CVE-2026-118748 - ASP[.]NET Core Denial of Service Vulnerability
    Advisory · The commit · The file
  • GHSA-r33q-3g5w-gqx6
    NuGet · Microsoft[.]TestPlatform[.]CLI · HIGH · Duplicate Advisory: Microsoft Security Advisory CVE-2026-105544 - .NET Elevation of Privilege Vulnerability
    Advisory · The commit · The file
  • GHSA-6vjv-7wm8-p67r
    NuGet · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x86 · MODERATE · Microsoft Security Advisory CVE-2026-114150 - ASP[.]NET Core Information Disclosure Vulnerability
    Advisory · The commit · The file
  • GHSA-67wp-ghc2-fw2g
    NuGet · Microsoft[.]AspNetCore[.]Http[.]Connections, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x86 · HIGH · Microsoft Security Advisory CVE-2026-114146 - ASP[.]NET Core Elevation of Privilege Vulnerability
    Advisory · The commit · The file
  • GHSA-7phj-vgxq-r67h
    NuGet · Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x86 · MODERATE · Microsoft Security Advisory CVE-2026-114157 - ASP[.]NET Core Security Feature Bypass Vulnerability
    Advisory · The commit · The file
  • GHSA-8w29-6cjc-h6w4
    NuGet · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x86 · MODERATE · Microsoft Security Advisory CVE-2026-114156 - ASP[.]NET Core Security Feature Bypass Vulnerability
    Advisory · The commit · The file
  • GHSA-r3qf-p3jm-8h4p
    NuGet · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x86 · MODERATE · Microsoft Security Advisory CVE-2026-109478 - ASP[.]NET Core Denial of Service Vulnerability
    Advisory · The commit · The file
  • GHSA-wr8v-9x5q-ggcm
    NuGet · Microsoft[.]AspNetCore[.]SignalR[.]StackExchangeRedis, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-musl-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]osx-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x86 · HIGH · Microsoft Security Advisory CVE-2026-114147 - ASP[.]NET Core Denial of Service Vulnerability
    Advisory · The commit · The file
  • GHSA-wrm2-c2h2-4w82
    NuGet · Microsoft[.]AspNetCore[.]App[.]Runtime[.]linux-arm · HIGH · Duplicate Advisory: Microsoft Security Advisory CVE-2026-109478 - ASP[.]NET Core Denial of Service Vulnerability
    Advisory · The commit · The file
  • GHSA-3893-7fxc-qvff
    NuGet · Microsoft[.]AspNetCore[.]Server[.]HttpSys, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-arm64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x64, Microsoft[.]AspNetCore[.]App[.]Runtime[.]win-x86 · MODERATE · Microsoft Security Advisory CVE-2026-114154 - ASP[.]NET Core Denial of Service Vulnerability
    Advisory · The commit · The file
  • GHSA-3cgx-w6gm-fqrx
    NuGet · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86, Microsoft[.]NETCore[.]App[.]Runtime[.]win-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]win-arm64 · HIGH · Microsoft Security Advisory CVE-2026-114159 - Visual Studio Remote Code Execution Vulnerability
    Advisory · The commit · The file
  • GHSA-6rff-vv3p-7mrw
    NuGet · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86 · HIGH · Duplicate Advisory: Microsoft Security Advisory CVE-2026-114159 - Visual Studio Remote Code Execution Vulnerability
    Advisory · The commit · The file
  • GHSA-cjjx-gv54-83qh
    NuGet · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86 · HIGH · Duplicate Advisory: Microsoft Security Advisory CVE-2026-114158 - Visual Studio Remote Code Execution Vulnerability
    Advisory · The commit · The file
  • GHSA-m63f-xhvm-6mv5
    NuGet, npm · Aspire[.]Cli, Aspire[.]Cli[.]linux-x64, Aspire[.]Cli[.]linux-arm64, Aspire[.]Cli[.]linux-musl-x64, Aspire[.]Cli[.]osx-x64, Aspire[.]Cli[.]osx-arm64, @microsoft/aspire-cli, @microsoft/aspire-cli-linux-x64, @microsoft/aspire-cli-linux-arm64, @microsoft/aspire-cli-linux-musl-x64, @microsoft/aspire-cli-osx-x64, @microsoft/aspire-cli-osx-arm64 · HIGH · Microsoft Security Advisory CVE-2026-120778 - Aspire Elevation of Privilege Vulnerability
    Advisory · The commit · The file
  • GHSA-q6jf-24jf-m3cg
    NuGet, npm · Aspire[.]Cli, Aspire[.]Cli[.]linux-x64, Aspire[.]Cli[.]linux-arm64, Aspire[.]Cli[.]linux-musl-x64, Aspire[.]Cli[.]osx-x64, Aspire[.]Cli[.]osx-arm64, @microsoft/aspire-cli, @microsoft/aspire-cli-linux-x64, @microsoft/aspire-cli-linux-arm64, @microsoft/aspire-cli-linux-musl-x64, @microsoft/aspire-cli-osx-x64, @microsoft/aspire-cli-osx-arm64 · HIGH · Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability
    Advisory · The commit · The file
  • GHSA-r8h3-p8p6-ggp7
    NuGet · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86, Microsoft[.]NETCore[.]App[.]Runtime[.]win-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]win-arm64 · HIGH · Microsoft Security Advisory CVE-2026-114158 - Visual Studio Remote Code Execution Vulnerability
    Advisory · The commit · The file
  • GHSA-fpxj-5c99-g7vj
    NuGet · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86, Microsoft[.]NETCore[.]App[.]Runtime[.]win-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]win-arm64 · HIGH · Microsoft Security Advisory CVE-2026-114151 - Visual Studio Remote Code Execution Vulnerability
    Advisory · The commit · The file
  • GHSA-mqcg-252r-5fj7
    NuGet · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86 · HIGH · Duplicate Advisory: Microsoft Security Advisory CVE-2026-114151 - Visual Studio Remote Code Execution Vulnerability
    Advisory · The commit · The file
  • GHSA-6856-87hx-p5x7
    NuGet · Microsoft[.]TestPlatform[.]CLI · MODERATE · Microsoft Security Advisory CVE-2026-105544 - .NET Elevation of Privilege Vulnerability
    Advisory · The commit · The file
  • GHSA-cfv6-4v53-fff6
    NuGet · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86 · HIGH · Duplicate Advisory: Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability
    Advisory · The commit · The file
  • GHSA-hm4p-mv9w-4w8f
    NuGet · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86 · HIGH · Duplicate Advisory: Microsoft Security Advisory CVE-2026-114152 - Visual Studio Remote Code Execution Vulnerability
    Advisory · The commit · The file
  • GHSA-x8x8-p968-x646
    NuGet · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86, Microsoft[.]NETCore[.]App[.]Runtime[.]win-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]win-arm64 · HIGH · Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability
    Advisory · The commit · The file
  • GHSA-xf35-v9jh-g65w
    NuGet · Microsoft[.]NETCore[.]App[.]Runtime[.]win-x86, Microsoft[.]NETCore[.]App[.]Runtime[.]win-x64, Microsoft[.]NETCore[.]App[.]Runtime[.]win-arm64 · HIGH · Microsoft Security Advisory CVE-2026-114152 - Visual Studio Remote Code Execution Vulnerability
    Advisory · The commit · The file

Permanent record