最近，微软发布了一份安全公告，修补了 ASP.NET Core 中的一个关键漏洞。该漏洞允许攻击者通过不一致的 HTTP 请求解释来绕过一项网络安全特性。CVE-2025-55315 的 CVSS 得分为 9.9 分（满分 10 分），是微软漏洞中评分最高的。 该漏洞在 ASP.NET Core 10.0、9.0、8.0 版本以及 ...

Microsoft announced the first release candidate of .NET 10 is now available with go-live support--ready for production apps. The company said this update brings enhancements across ASP.NET Core, ...

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Traditional caching fails to stop "thundering ...

微软宣布了.NET 10的全面可用性，称其为迄今为止该平台最具生产力、现代化、安全和高性能的版本。正如公司所述，此次发布是数千名贡献者历时一年努力的结果。它包括了对运行时、库、语言、工具、框架和工作负载的改进。 根据微软的说法，这次更新的 ...

The Kestrel web server flaw allows request smuggling attacks, but the actual risk depends on the application code and deployment. Microsoft has patched a critical vulnerability in ASP.NET Core that ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

Earlier this week, Microsoft patched a vulnerability that was flagged with the "highest ever" severity rating received by an ASP.NET Core security flaw. This HTTP request smuggling bug (CVE-2025-55315 ...

Microsoft has patched an ASP.NET Core vulnerability with a CVSS score of 9.9, which security program manager Barry Dorrans said was "our highest ever." The flaw is in the Kestrel web server component ...