UBUNTU-CVE-2026-96230

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-96230
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96230.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-96230
Upstream
  • CVE-2026-96230
Published
2026-10-13T00:00:00Z
Modified
2026-10-20T10:46:03Z
Severity
  • Ubuntu - medium
Summary
[none]
Details

Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

References

Affected packages

Ubuntu:22.04:LTS
dotnet6

Package

Name
dotnet6
Purl
pkg:deb/ubuntu/dotnet6?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.0.108-0ubuntu1~22.04.1
6.0.109-0ubuntu1~22.04.1
6.0.110-0ubuntu1~22.04.1
6.0.111-0ubuntu1~22.04.1
6.0.113-0ubuntu1~22.04.1
6.0.116-0ubuntu1~22.04.1
6.0.118-0ubuntu1~22.04.1
6.0.119-0ubuntu1~22.04.1
6.0.120-0ubuntu1~22.04.1
6.0.121-0ubuntu1~22.04.1
6.0.122-0ubuntu1~22.04.1
6.0.123-0ubuntu1~22.04.1
6.0.124-0ubuntu1~22.04.1
6.0.125-0ubuntu1~22.04.1
6.0.126-0ubuntu1~22.04.1
6.0.127-0ubuntu1~22.04.1
6.0.128-0ubuntu1~22.04.2
6.0.132-0ubuntu1~22.04.1
6.0.133-0ubuntu1~22.04.1
6.0.135-0ubuntu1~22.04.1
6.0.136-0ubuntu1~22.04.1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "aspnetcore-runtime-6.0",
            "binary_version":  "6.0.136-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "aspnetcore-targeting-pack-6.0",
            "binary_version":  "6.0.136-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-apphost-pack-6.0",
            "binary_version":  "6.0.136-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-host",
            "binary_version":  "6.0.136-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-hostfxr-6.0",
            "binary_version":  "6.0.136-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-runtime-6.0",
            "binary_version":  "6.0.136-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-6.0",
            "binary_version":  "6.0.136-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-6.0-source-built-artifacts",
            "binary_version":  "6.0.136-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-targeting-pack-6.0",
            "binary_version":  "6.0.136-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-templates-6.0",
            "binary_version":  "6.0.136-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet6",
            "binary_version":  "6.0.136-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "netstandard-targeting-pack-2.1",
            "binary_version":  "6.0.136-0ubuntu1~22.04.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96230.json"
dotnet7

Package

Name
dotnet7
Purl
pkg:deb/ubuntu/dotnet7?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

7.*
7.0.105-0ubuntu1~22.04.1
7.0.107-0ubuntu1~22.04.1
7.0.108-0ubuntu1~22.04.1
7.0.109-0ubuntu1~22.04.1
7.0.110-0ubuntu1~22.04.1
7.0.111-0ubuntu1~22.04.1
7.0.112-0ubuntu1~22.04.1
7.0.113-0ubuntu1~22.04.1
7.0.114-0ubuntu1~22.04.1
7.0.115-0ubuntu1~22.04.1
7.0.116-0ubuntu1~22.04.1
7.0.117-0ubuntu1~22.04.1
7.0.117-0ubuntu1~22.04.2
7.0.119-0ubuntu1~22.04.1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "aspnetcore-runtime-7.0",
            "binary_version":  "7.0.119-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "aspnetcore-targeting-pack-7.0",
            "binary_version":  "7.0.119-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-apphost-pack-7.0",
            "binary_version":  "7.0.119-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-host-7.0",
            "binary_version":  "7.0.119-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-hostfxr-7.0",
            "binary_version":  "7.0.119-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-runtime-7.0",
            "binary_version":  "7.0.119-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-7.0",
            "binary_version":  "7.0.119-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-7.0-source-built-artifacts",
            "binary_version":  "7.0.119-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-targeting-pack-7.0",
            "binary_version":  "7.0.119-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-templates-7.0",
            "binary_version":  "7.0.119-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet7",
            "binary_version":  "7.0.119-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "netstandard-targeting-pack-2.1-7.0",
            "binary_version":  "7.0.119-0ubuntu1~22.04.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96230.json"
dotnet8

Package

Name
dotnet8
Purl
pkg:deb/ubuntu/dotnet8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

8.*
8.0.102-8.0.2-0ubuntu1~22.04.1
8.0.103-8.0.3-0ubuntu1~22.04.1
8.0.103-8.0.3-0ubuntu1~22.04.2
8.0.105-8.0.5-0ubuntu1~22.04.1
8.0.107-8.0.7-0ubuntu1~22.04.1
8.0.108-8.0.8-0ubuntu1~22.04.1
8.0.110-8.0.10-0ubuntu1~22.04.1
8.0.111-8.0.11-0ubuntu1~22.04.1
8.0.112-8.0.12-0ubuntu1~22.04.1
8.0.114-8.0.14-0ubuntu1~22.04.1
8.0.115-8.0.15-0ubuntu1~22.04.1
8.0.116-8.0.16-0ubuntu1~22.04.1
8.0.117-8.0.17-0ubuntu1~22.04.1
8.0.118-8.0.18-0ubuntu1~22.04.1
8.0.119-8.0.19-0ubuntu1~22.04.1
8.0.120-8.0.20-0ubuntu1~22.04.1
8.0.121-8.0.21-0ubuntu1~22.04.1
8.0.122-8.0.22-0ubuntu1~22.04.1
8.0.123-8.0.23-0ubuntu1~22.04.1
8.0.124-8.0.24-0ubuntu1~22.04.1
8.0.125-8.0.25-0ubuntu1~22.04.1
8.0.126-8.0.26-0ubuntu1~22.04.1
8.0.127-8.0.27-0ubuntu1~22.04.1
8.0.128-8.0.28-0ubuntu1~22.04.1
8.0.129-8.0.29-0ubuntu1~22.04.1
8.0.130-8.0.30-0ubuntu1~22.04.1
8.0.131-8.0.31-0ubuntu1~22.04.1
8.0.132-8.0.32-0ubuntu1~22.04.1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "aspnetcore-runtime-8.0",
            "binary_version":  "8.0.32-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "aspnetcore-runtime-dbg-8.0",
            "binary_version":  "8.0.32-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "aspnetcore-targeting-pack-8.0",
            "binary_version":  "8.0.32-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-apphost-pack-8.0",
            "binary_version":  "8.0.32-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-host-8.0",
            "binary_version":  "8.0.32-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-hostfxr-8.0",
            "binary_version":  "8.0.32-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-runtime-8.0",
            "binary_version":  "8.0.32-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-runtime-dbg-8.0",
            "binary_version":  "8.0.32-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-8.0",
            "binary_version":  "8.0.132-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-8.0-source-built-artifacts",
            "binary_version":  "8.0.132-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-dbg-8.0",
            "binary_version":  "8.0.132-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-targeting-pack-8.0",
            "binary_version":  "8.0.32-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet-templates-8.0",
            "binary_version":  "8.0.132-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "dotnet8",
            "binary_version":  "8.0.132-8.0.32-0ubuntu1~22.04.1"
        },
        {
            "binary_name":  "netstandard-targeting-pack-2.1-8.0",
            "binary_version":  "8.0.132-0ubuntu1~22.04.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96230.json"
Ubuntu:24.04:LTS
dotnet10

Package

Name
dotnet10
Purl
pkg:deb/ubuntu/dotnet10?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

10.*
10.0.100-10.0.0-0ubuntu1~24.04.1
10.0.101-10.0.1-0ubuntu1~24.04.2
10.0.103-10.0.3-0ubuntu1~24.04.1
10.0.104-10.0.4-0ubuntu1~24.04.1
10.0.105-10.0.5-0ubuntu1~24.04.1
10.0.106-10.0.6-0ubuntu1~24.04.1
10.0.107-10.0.7-0ubuntu1~24.04.1
10.0.108-10.0.8-0ubuntu1~24.04.1
10.0.109-10.0.9-0ubuntu1~24.04.1
10.0.110-10.0.10-0ubuntu1~24.04.1
10.0.111-10.0.11-0ubuntu1~24.04.1
10.0.112-10.0.12-0ubuntu1~24.04.1
10.0.113-10.0.13-0ubuntu1~24.04.1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "aspnetcore-runtime-10.0",
            "binary_version":  "10.0.13-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "aspnetcore-runtime-dbg-10.0",
            "binary_version":  "10.0.13-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "aspnetcore-targeting-pack-10.0",
            "binary_version":  "10.0.13-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-apphost-pack-10.0",
            "binary_version":  "10.0.13-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-host-10.0",
            "binary_version":  "10.0.13-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-hostfxr-10.0",
            "binary_version":  "10.0.13-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-runtime-10.0",
            "binary_version":  "10.0.13-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-runtime-dbg-10.0",
            "binary_version":  "10.0.13-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-10.0",
            "binary_version":  "10.0.113-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-10.0-source-built-artifacts",
            "binary_version":  "10.0.113-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-aot-10.0",
            "binary_version":  "10.0.113-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-dbg-10.0",
            "binary_version":  "10.0.113-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-targeting-pack-10.0",
            "binary_version":  "10.0.13-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-templates-10.0",
            "binary_version":  "10.0.113-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet10",
            "binary_version":  "10.0.113-10.0.13-0ubuntu1~24.04.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96230.json"
dotnet8

Package

Name
dotnet8
Purl
pkg:deb/ubuntu/dotnet8?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

8.*
8.0.100-8.0.0~rc1-0ubuntu1
8.0.100-8.0.0~rc2-0ubuntu1
8.0.100-8.0.0~rc2-0ubuntu2
8.0.100-8.0.0-0ubuntu1
8.0.100-8.0.0-0ubuntu2
8.0.101-8.0.1-0ubuntu1
8.0.101-8.0.1-0ubuntu2
8.0.102-8.0.2-0ubuntu1
8.0.103-8.0.3-0ubuntu2
8.0.103-8.0.3-0ubuntu3
8.0.104-8.0.4-0ubuntu1
8.0.105-8.0.5-0ubuntu1~24.04.1
8.0.107-8.0.7-0ubuntu1~24.04.1
8.0.108-8.0.8-0ubuntu1~24.04.1
8.0.108-8.0.8-0ubuntu1~24.04.2
8.0.110-8.0.10-0ubuntu1~24.04.1
8.0.111-8.0.11-0ubuntu1~24.04.1
8.0.112-8.0.12-0ubuntu1~24.04.1
8.0.114-8.0.14-0ubuntu1~24.04.1
8.0.115-8.0.15-0ubuntu1~24.04.1
8.0.116-8.0.16-0ubuntu1~24.04.1
8.0.117-8.0.17-0ubuntu1~24.04.1
8.0.118-8.0.18-0ubuntu1~24.04.1
8.0.119-8.0.19-0ubuntu1~24.04.1
8.0.120-8.0.20-0ubuntu1~24.04.1
8.0.121-8.0.21-0ubuntu1~24.04.1
8.0.122-8.0.22-0ubuntu1~24.04.1
8.0.123-8.0.23-0ubuntu1~24.04.1
8.0.124-8.0.24-0ubuntu1~24.04.1
8.0.125-8.0.25-0ubuntu1~24.04.1
8.0.126-8.0.26-0ubuntu1~24.04.1
8.0.127-8.0.27-0ubuntu1~24.04.1
8.0.128-8.0.28-0ubuntu1~24.04.1
8.0.129-8.0.29-0ubuntu1~24.04.1
8.0.130-8.0.30-0ubuntu1~24.04.1
8.0.131-8.0.31-0ubuntu1~24.04.1
8.0.132-8.0.32-0ubuntu1~24.04.1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "aspnetcore-runtime-8.0",
            "binary_version":  "8.0.32-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "aspnetcore-runtime-dbg-8.0",
            "binary_version":  "8.0.32-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "aspnetcore-targeting-pack-8.0",
            "binary_version":  "8.0.32-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-apphost-pack-8.0",
            "binary_version":  "8.0.32-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-host-8.0",
            "binary_version":  "8.0.32-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-hostfxr-8.0",
            "binary_version":  "8.0.32-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-runtime-8.0",
            "binary_version":  "8.0.32-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-runtime-dbg-8.0",
            "binary_version":  "8.0.32-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-8.0",
            "binary_version":  "8.0.132-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-8.0-source-built-artifacts",
            "binary_version":  "8.0.132-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-dbg-8.0",
            "binary_version":  "8.0.132-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-targeting-pack-8.0",
            "binary_version":  "8.0.32-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet-templates-8.0",
            "binary_version":  "8.0.132-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "dotnet8",
            "binary_version":  "8.0.132-8.0.32-0ubuntu1~24.04.1"
        },
        {
            "binary_name":  "netstandard-targeting-pack-2.1-8.0",
            "binary_version":  "8.0.132-0ubuntu1~24.04.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96230.json"
Ubuntu:26.04:LTS
dotnet10

Package

Name
dotnet10
Purl
pkg:deb/ubuntu/dotnet10?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

10.*
10.0.100-10.0.0~rc1-0ubuntu1
10.0.100-10.0.0~rc2-0ubuntu1
10.0.100-10.0.0-0ubuntu1
10.0.100-10.0.0-0ubuntu2
10.0.101-10.0.1-0ubuntu1
10.0.101-10.0.1-0ubuntu2
10.0.101-10.0.1-0ubuntu3
10.0.102-10.0.2-0ubuntu1
10.0.103-10.0.3-0ubuntu1
10.0.104-10.0.4-0ubuntu1
10.0.105-10.0.5-0ubuntu1
10.0.107-10.0.7-0ubuntu1~26.04.1
10.0.108-10.0.8-0ubuntu1~26.04.1
10.0.109-10.0.9-0ubuntu1~26.04.1
10.0.110-10.0.10-0ubuntu1~26.04.1
10.0.111-10.0.11-0ubuntu1~26.04.1
10.0.112-10.0.12-0ubuntu1~26.04.1
10.0.113-10.0.13-0ubuntu1~26.04.1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "aspnetcore-runtime-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.04.1"
        },
        {
            "binary_name":  "aspnetcore-runtime-dbg-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.04.1"
        },
        {
            "binary_name":  "aspnetcore-targeting-pack-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.04.1"
        },
        {
            "binary_name":  "dotnet-apphost-pack-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.04.1"
        },
        {
            "binary_name":  "dotnet-host-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.04.1"
        },
        {
            "binary_name":  "dotnet-hostfxr-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.04.1"
        },
        {
            "binary_name":  "dotnet-runtime-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.04.1"
        },
        {
            "binary_name":  "dotnet-runtime-dbg-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-10.0",
            "binary_version":  "10.0.113-0ubuntu1~26.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-10.0-source-built-artifacts",
            "binary_version":  "10.0.113-0ubuntu1~26.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-aot-10.0",
            "binary_version":  "10.0.113-0ubuntu1~26.04.1"
        },
        {
            "binary_name":  "dotnet-sdk-dbg-10.0",
            "binary_version":  "10.0.113-0ubuntu1~26.04.1"
        },
        {
            "binary_name":  "dotnet-targeting-pack-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.04.1"
        },
        {
            "binary_name":  "dotnet-templates-10.0",
            "binary_version":  "10.0.113-0ubuntu1~26.04.1"
        },
        {
            "binary_name":  "dotnet10",
            "binary_version":  "10.0.113-10.0.13-0ubuntu1~26.04.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96230.json"
Ubuntu:26.10
dotnet10

Package

Name
dotnet10
Purl
pkg:deb/ubuntu/dotnet10?arch=source&distro=stonking

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

10.*
10.0.105-10.0.5-0ubuntu1
10.0.107-10.0.7-0ubuntu1~26.04.1
10.0.108-10.0.8-0ubuntu1
10.0.109-10.0.9-0ubuntu1
10.0.110-10.0.10-0ubuntu3
10.0.111-10.0.11-0ubuntu1
10.0.112-10.0.12-0ubuntu1
10.0.112-10.0.12-0ubuntu2
10.0.113-10.0.13-0ubuntu1~26.10.1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "aspnetcore-runtime-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "aspnetcore-runtime-dbg-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "aspnetcore-targeting-pack-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-apphost-pack-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-host-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-hostfxr-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-runtime-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-runtime-dbg-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-sdk-10.0",
            "binary_version":  "10.0.113-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-sdk-10.0-source-built-artifacts",
            "binary_version":  "10.0.113-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-sdk-aot-10.0",
            "binary_version":  "10.0.113-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-sdk-dbg-10.0",
            "binary_version":  "10.0.113-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-targeting-pack-10.0",
            "binary_version":  "10.0.13-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-templates-10.0",
            "binary_version":  "10.0.113-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet10",
            "binary_version":  "10.0.113-10.0.13-0ubuntu1~26.10.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96230.json"
dotnet11

Package

Name
dotnet11
Purl
pkg:deb/ubuntu/dotnet11?arch=source&distro=stonking

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

11.*
11.0.100-11.0.0~rc1-0ubuntu1
11.0.100-11.0.0~rc2-0ubuntu1~26.10.1

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "aspnetcore-runtime-11.0",
            "binary_version":  "11.0.0~rc2-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "aspnetcore-runtime-dbg-11.0",
            "binary_version":  "11.0.0~rc2-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "aspnetcore-targeting-pack-11.0",
            "binary_version":  "11.0.0~rc2-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-apphost-pack-11.0",
            "binary_version":  "11.0.0~rc2-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-host-11.0",
            "binary_version":  "11.0.0~rc2-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-hostfxr-11.0",
            "binary_version":  "11.0.0~rc2-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-runtime-11.0",
            "binary_version":  "11.0.0~rc2-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-runtime-dbg-11.0",
            "binary_version":  "11.0.0~rc2-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-sdk-11.0",
            "binary_version":  "11.0.100~rc2-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-sdk-11.0-source-built-artifacts",
            "binary_version":  "11.0.100~rc2-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-sdk-aot-11.0",
            "binary_version":  "11.0.100~rc2-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-sdk-dbg-11.0",
            "binary_version":  "11.0.100~rc2-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-targeting-pack-11.0",
            "binary_version":  "11.0.0~rc2-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet-templates-11.0",
            "binary_version":  "11.0.100~rc2-0ubuntu1~26.10.1"
        },
        {
            "binary_name":  "dotnet11",
            "binary_version":  "11.0.100-11.0.0~rc2-0ubuntu1~26.10.1"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-96230.json"