<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
  <channel>
    <title>InfoQ - ASP.NET Core - News</title>
    <link>https://www.infoq.com</link>
    <description>InfoQ ASP.NET Core News feed</description>
    <item>
      <title>Microsoft Patches Critical ASP.NET Core Vulnerability with 9.9 Severity Score</title>
      <link>https://www.infoq.com/news/2025/11/dotnet-request-smuggling/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=ASP.NET+Core-news</link>
      <description>&lt;img src="https://res.infoq.com/news/2025/11/dotnet-request-smuggling/en/headerimage/generatedHeaderImage-1762635637772.jpg"/&gt;&lt;p&gt;Microsoft recently released a security advisory and patched a critical vulnerability in ASP.NET Core that allows an attacker to bypass a security feature over a network due to an inconsistent interpretation of HTTP requests. With a CVSS score of 9.9 out of 10, CVE-2025-55315 is the highest-rated Microsoft vulnerability.&lt;/p&gt; &lt;i&gt;By Renato Losio&lt;/i&gt;</description>
      <category>.NET 6</category>
      <category>ASP.NET Core</category>
      <category>.NET 10</category>
      <category>.NET 8</category>
      <category>.NET 9</category>
      <category>.NET</category>
      <category>Development</category>
      <category>news</category>
      <pubDate>Wed, 12 Nov 2025 10:26:00 GMT</pubDate>
      <guid>https://www.infoq.com/news/2025/11/dotnet-request-smuggling/?utm_campaign=infoq_content&amp;utm_source=infoq&amp;utm_medium=feed&amp;utm_term=ASP.NET+Core-news</guid>
      <dc:creator>Renato Losio</dc:creator>
      <dc:date>2025-11-12T10:26:00Z</dc:date>
      <dc:identifier>/news/2025/11/dotnet-request-smuggling/en</dc:identifier>
    </item>
  </channel>
</rss>
