{"package":"Microsoft.AspNetCore.Server.Kestrel.Core","ecosystem":"nuget","latest_version":"2.3.9","description":"Core components of ASP.NET Core Kestrel cross-platform web server.","license":"","license_risk":"unknown","commercial_use_notes":"No license declared in registry metadata — verify manually before commercial use.","homepage":"https://asp.net/","repository":"https://asp.net/","downloads_weekly":1250006,"health":{"score":56,"risk":"high","breakdown":{"maintenance":15,"popularity":17,"security":10,"maturity":12,"community":2},"deprecated":false,"max_score":100},"vulnerabilities":{"count":2,"critical":1,"high":1,"medium":0,"low":0,"details":[{"vuln_id":"BIT-aspnet-core-2021-1723","severity":"high","summary":"ASP.NET Core and Visual Studio Denial of Service Vulnerability","affected_versions":"<2.1.25|>=3.1.0,<3.1.11|>=5.0.0,<5.0.2|>=3.1.0,<3.1.11|>=5.0.0,<5.0.2|>=3.1.0,<3.1.11|>=5.0.0,<5.0.2|>=3.1.0,<3.1.11|>=5.0.0,<5.0.2|>=3.1.0,<3.1.11|>=5.0.0,<5.0.2|>=3.1.0,<3.1.11|>=5.0.0,<5.0.2|>=3.1.0,<3.1.11|>=5.0.0,<5.0.2|>=3.1.0,<3.1.11|>=5.0.0,<5.0.2|>=3.1.0,<3.1.11|>=5.0.0,<5.0.2|>=3.1.0,<3.1.11|>=5.0.0,<5.0.2|>=5.0.1,<5.0.2|=0.0.1-alpha|=2.0.0|=2.0.0-preview1-final|=2.0.0-preview2-final|=2.0.1|=2.0.2|=2.0.3|=2.0.4|=2.1.0|=2.1.0-preview1-final|=2.1.0-preview2-final|=2.1.0-rc1-final|=2.1.1|=2.1.2|=2.1.3|=2.1.7|=3.1.0|=3.1.1|=3.1.10|=3.1.2|=3.1.3|=3.1.4|=3.1.5|=3.1.6|=3.1.7|=3.1.8|=3.1.9|=5.0.0|=5.0.1|=3.1.0|=3.1.1|=3.1.10|=3.1.2|=3.1.3|=3.1.4|=3.1.5|=3.1.6|=3.1.7|=3.1.8|=3.1.9|=5.0.0|=5.0.1|=3.1.0|=3.1.1|=3.1.10|=3.1.2|=3.1.3|=3.1.4|=3.1.5|=3.1.6|=3.1.7|=3.1.8|=3.1.9|=5.0.0|=5.0.1|=3.1.0|=3.1.1|=3.1.10|=3.1.2|=3.1.3|=3.1.4|=3.1.5|=3.1.6|=3.1.7|=3.1.8|=3.1.9|=5.0.0|=5.0.1|=3.1.0|=3.1.1|=3.1.10|=3.1.2|=3.1.3|=3.1.4|=3.1.5|=3.1.6|=3.1.7|=3.1.8|=3.1.9|=5.0.0|=5.0.1|=3.1.0|=3.1.1|=3.1.10|=3.1.2|=3.1.3|=3.1.4|=3.1.5|=3.1.6|=3.1.7|=3.1.8|=3.1.9|=5.0.0|=5.0.1|=3.1.0|=3.1.1|=3.1.10|=3.1.2|=3.1.3|=3.1.4|=3.1.5|=3.1.6|=3.1.7|=3.1.8|=3.1.9|=5.0.0|=5.0.1|=3.1.10|=3.1.5|=3.1.6|=3.1.7|=3.1.8|=3.1.9|=5.0.0|=5.0.1|=3.1.0|=3.1.1|=3.1.10|=3.1.2|=3.1.3|=3.1.4|=3.1.5|=3.1.6|=3.1.7|=3.1.8|=3.1.9|=5.0.0|=5.0.1|=3.1.0|=3.1.1|=3.1.10|=3.1.2|=3.1.3|=3.1.4|=3.1.5|=3.1.6|=3.1.7|=3.1.8|=3.1.9|=5.0.0|=5.0.1|=5.0.1","fixed_version":"5.0.2","source":"osv","published_at":"2022-05-24T17:38:51Z"},{"vuln_id":"BIT-aspnet-core-2025-55315","severity":"critical","summary":"Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability","affected_versions":"<2.3.6|>=10.0.0-rc.1.25451.107,<10.0.0-rc.2.25502.107|>=10.0.0-rc.1.25451.107,<10.0.0-rc.2.25502.107|>=10.0.0-rc.1.25451.107,<10.0.0-rc.2.25502.107|>=10.0.0-rc.1.25451.107,<10.0.0-rc.2.25502.107|>=10.0.0-rc.1.25451.107,<10.0.0-rc.2.25502.107|>=10.0.0-rc.1.25451.107,<10.0.0-rc.2.25502.107|>=10.0.0-rc.1.25451.107,<10.0.0-rc.2.25502.107|>=10.0.0-rc.1.25451.107,<10.0.0-rc.2.25502.107|>=10.0.0-rc.1.25451.107,<10.0.0-rc.2.25502.107|>=10.0.0-rc.1.25451.107,<10.0.0-rc.2.25502.107|>=10.0.0-rc.1.25451.107,<10.0.0-rc.2.25502.107|>=10.0.0-rc.1.25451.107,<10.0.0-rc.2.25502.107|>=9.0.0,<9.0.10|>=9.0.0,<9.0.10|>=9.0.0,<9.0.10|>=9.0.0,<9.0.10|>=9.0.0,<9.0.10|>=9.0.0,<9.0.10|>=9.0.0,<9.0.10|>=9.0.0,<9.0.10|>=9.0.0,<9.0.10|>=9.0.0,<9.0.10|>=9.0.0,<9.0.10|>=9.0.0,<9.0.10|>=8.0.0,<8.0.21|>=8.0.0,<8.0.21|>=8.0.0,<8.0.21|>=8.0.0,<8.0.21|>=8.0.0,<8.0.21|>=8.0.0,<8.0.21|>=8.0.0,<8.0.21|>=8.0.0,<8.0.21|>=8.0.0,<8.0.21|>=8.0.0,<8.0.21|>=8.0.0,<8.0.21|>=8.0.0,<8.0.21|=0.0.1-alpha|=2.0.0|=2.0.0-preview1-final|=2.0.0-preview2-final|=2.0.1|=2.0.2|=2.0.3|=2.0.4|=2.1.0|=2.1.0-preview1-final|=2.1.0-preview2-final|=2.1.0-rc1-final|=2.1.1|=2.1.2|=2.1.25|=2.1.3|=2.1.7|=2.2.0|=2.2.0-preview1-35029|=2.2.0-preview2-35157|=2.2.0-preview3-35497|=2.3.0|=10.0.0-rc.1.25451.107|=10.0.0-rc.1.25451.107|=10.0.0-rc.1.25451.107|=10.0.0-rc.1.25451.107|=10.0.0-rc.1.25451.107|=10.0.0-rc.1.25451.107|=10.0.0-rc.1.25451.107|=10.0.0-rc.1.25451.107|=10.0.0-rc.1.25451.107|=10.0.0-rc.1.25451.107|=10.0.0-rc.1.25451.107|=10.0.0-rc.1.25451.107|=9.0.0|=9.0.1|=9.0.2|=9.0.3|=9.0.4|=9.0.5|=9.0.6|=9.0.7|=9.0.8|=9.0.9|=9.0.0|=9.0.1|=9.0.2|=9.0.3|=9.0.4|=9.0.5|=9.0.6|=9.0.7|=9.0.8|=9.0.9|=9.0.0|=9.0.1|=9.0.2|=9.0.3|=9.0.4|=9.0.5|=9.0.6|=9.0.7|=9.0.8|=9.0.9|=9.0.0|=9.0.1|=9.0.2|=9.0.3|=9.0.4|=9.0.5|=9.0.6|=9.0.7|=9.0.8|=9.0.9|=9.0.0|=9.0.1|=9.0.2|=9.0.3|=9.0.4|=9.0.5|=9.0.6|=9.0.7|=9.0.8|=9.0.9|=9.0.0|=9.0.1|=9.0.2|=9.0.3|=9.0.4|=9.0.5|=9.0.6|=9.0.7|=9.0.8|=9.0.9|=9.0.0|=9.0.1|=9.0.2|=9.0.3|=9.0.4|=9.0.5|=9.0.6|=9.0.7|=9.0.8|=9.0.9|=9.0.0|=9.0.1|=9.0.2|=9.0.3|=9.0.4|=9.0.5|=9.0.6|=9.0.7|=9.0.8|=9.0.9|=9.0.0|=9.0.1|=9.0.2|=9.0.3|=9.0.4|=9.0.5|=9.0.6|=9.0.7|=9.0.8|=9.0.9|=9.0.0|=9.0.1|=9.0.2|=9.0.3|=9.0.4|=9.0.5|=9.0.6|=9.0.7|=9.0.8|=9.0.9|=9.0.0|=9.0.1|=9.0.2|=9.0.3|=9.0.4|=9.0.5|=9.0.6|=9.0.7|=9.0.8|=9.0.9|=8.0.0|=8.0.1|=8.0.10|=8.0.11|=8.0.12|=8.0.13|=8.0.14|=8.0.15|=8.0.16|=8.0.17|=8.0.18|=8.0.19|=8.0.2|=8.0.20|=8.0.3|=8.0.4|=8.0.5|=8.0.6|=8.0.7|=8.0.8|=8.0.0|=8.0.1|=8.0.10|=8.0.11|=8.0.12|=8.0.13|=8.0.14|=8.0.15|=8.0.16|=8.0.17|=8.0.18|=8.0.19|=8.0.2|=8.0.20|=8.0.3|=8.0.4|=8.0.5|=8.0.6|=8.0.7|=8.0.8|=8.0.0|=8.0.1|=8.0.10|=8.0.11|=8.0.12|=8.0.13|=8.0.14|=8.0.15|=8.0.16|=8.0.17|=8.0.18|=8.0.19|=8.0.2|=8.0.20|=8.0.3|=8.0.4|=8.0.5|=8.0.6|=8.0.7|=8.0.8|=8.0.0|=8.0.1|=8.0.10|=8.0.11|=8.0.12|=8.0.13|=8.0.14|=8.0.15|=8.0.16|=8.0.17|=8.0.18|=8.0.19|=8.0.2|=8.0.20|=8.0.3|=8.0.4|=8.0.5|=8.0.6|=8.0.7|=8.0.8|=8.0.0|=8.0.1|=8.0.10|=8.0.11|=8.0.12|=8.0.13|=8.0.14|=8.0.15|=8.0.16|=8.0.17|=8.0.18|=8.0.19|=8.0.2|=8.0.20|=8.0.3|=8.0.4|=8.0.5|=8.0.6|=8.0.7|=8.0.8|=8.0.0|=8.0.1|=8.0.10|=8.0.11|=8.0.12|=8.0.13|=8.0.14|=8.0.15|=8.0.16|=8.0.17|=8.0.18|=8.0.19|=8.0.2|=8.0.20|=8.0.3|=8.0.4|=8.0.5|=8.0.6|=8.0.7|=8.0.8|=8.0.0|=8.0.1|=8.0.10|=8.0.11|=8.0.12|=8.0.13|=8.0.14|=8.0.15|=8.0.16|=8.0.17|=8.0.18|=8.0.19|=8.0.2|=8.0.20|=8.0.3|=8.0.4|=8.0.5|=8.0.6|=8.0.7|=8.0.8|=8.0.0|=8.0.1|=8.0.10|=8.0.11|=8.0.12|=8.0.13|=8.0.14|=8.0.15|=8.0.16|=8.0.17|=8.0.18|=8.0.19|=8.0.2|=8.0.20|=8.0.3|=8.0.4|=8.0.5|=8.0.6|=8.0.7|=8.0.8|=8.0.0|=8.0.1|=8.0.10|=8.0.11|=8.0.12|=8.0.13|=8.0.14|=8.0.15|=8.0.16|=8.0.17|=8.0.18|=8.0.19|=8.0.2|=8.0.20|=8.0.3|=8.0.4|=8.0.5|=8.0.6|=8.0.7|=8.0.8|=8.0.0|=8.0.1|=8.0.10|=8.0.11|=8.0.12|=8.0.13|=8.0.14|=8.0.15|=8.0.16|=8.0.17|=8.0.18|=8.0.19|=8.0.2|=8.0.20|=8.0.3|=8.0.4|=8.0.5|=8.0.6|=8.0.7|=8.0.8|=8.0.0|=8.0.1|=8.0.10|=8.0.11|=8.0.12|=8.0.13|=8.0.14|=8.0.15|=8.0.16|=8.0.17|=8.0.18|=8.0.19|=8.0.2|=8.0.20|=8.0.3|=8.0.4|=8.0.5|=8.0.6|=8.0.7|=8.0.8","fixed_version":"8.0.21","source":"osv","published_at":"2025-10-14T20:32:06Z"}],"actively_exploited_count":0,"likely_exploited_count":0},"versions":{"latest":"2.3.9","total_count":25,"recent":["2.0.2","2.0.3","2.0.4","2.1.0-preview1-final","2.1.0-preview2-final","2.1.0-rc1-final","2.1.0","2.1.1","2.1.2","2.1.3","2.1.7","2.1.25","2.2.0-preview1-35029","2.2.0-preview2-35157","2.2.0-preview3-35497","2.2.0","2.3.0","2.3.6","2.3.8","2.3.9"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":1,"first_published":null,"last_published":"2026-01-07T20:26:28.857+00:00","dependencies_count":13,"dependencies":["Microsoft.AspNetCore.Hosting.Abstractions","Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions","Microsoft.AspNetCore.WebUtilities","Microsoft.Extensions.Configuration","Microsoft.Extensions.Configuration.Binder","Microsoft.Extensions.Logging.Abstractions","Microsoft.Extensions.Options","Microsoft.Net.Http.Headers","System.Memory","System.Numerics.Vectors","System.Runtime.CompilerServices.Unsafe","System.Security.Cryptography.Cng","System.Threading.Tasks.Extensions"]},"github_stats":null,"bundle":null,"typescript":null,"known_issues":{"bugs_count":0,"bugs_severity":{},"status_breakdown":{},"link":null,"scope":"none"},"historical_compromise":null,"recommendation":{"action":"do_not_use","issues":["1 high severity vulnerabilities","1 critical vulnerabilities"],"use_version":"2.3.9","version_hint":"Update to >= 8.0.21 to fix known vulnerabilities","summary":"Microsoft.AspNetCore.Server.Kestrel.Core has critical vulnerabilities — do not use"},"version_scoped":null,"requested_version":null,"_cache":"miss","_response_ms":833,"_powered_by":"depscope.dev — free package intelligence for AI agents","typosquat":{"is_suspected":false},"maintainer_trust":{"available":false},"malicious":{"is_malicious":false},"scorecard":{"available":false},"quality":{"available":false},"version_history_summary":{"total_versions":20,"first_release_age_days":null,"last_release_days_ago":112,"avg_days_between_releases":null,"release_velocity":"moderate"}}