Package · NuGet

Microsoft.AspNetCore.Server.Kestrel.Core

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.9

CVE-2025-55315 Public exploit EPSS 67%

ASP.NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.

Microsoft Microsoft Visual Studio 2022 version 17.14 Microsoft Visual Studio 2022 version 17.12 Microsoft Visual Studio 2022 version 17.10 Ubuntu Alpine Wolfi NuGet

Oct 14, 2025