FYI, the fixed versions were released yesterday, the 14th, in the October 2025 "Patch Tuesday"
at https://dotnet.microsoft.com/en-us/download/dotnet
They are 8.0.21 and 9.0.10
https://github.com/dotnet/core/blob/main/release-notes/8.0/8...
https://github.com/dotnet/core/blob/main/release-notes/9.0/9...
as per https://github.com/dotnet/aspnetcore/issues/64033
In ASP.NET Security Feature Bypass Vulnerabilitydotnet
core
PowerShell2015–2026
dotnet / core
core
.NET news, announcements, release notes, and more!
80Distinct people
86Mentions
0Explicit recommenders
22.1KGitHub stars
What to know before exploring
What it is
.NET news, announcements, release notes, and more!
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
- dotnet/aspnetcore · linked in 2 of the same discussions
- dotnet/roslyn · linked in 2 of the same discussions
- dotnet/vscode-csharp · linked in 2 of the same discussions
Mentioned in the same Hacker News threads. That is not proof they are substitutes.
This week on Hacker News
Nov 8–Nov 15 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/15/2026, 2:59:53 AM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year86 dated mentions
Observed mentions: 2015-04-29 21:44:49 UTC to 2026-09-17 14:13:26 UTC.
* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2015 | 2015-01-01 00:00:00 UTC | 2016-01-01 00:00:00 UTC | 3 | 0 | 3 |
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 7 | 3 | 4 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 15 | 3 | 12 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 6 | 1 | 5 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 4 | 0 | 4 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 9 | 1 | 8 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 13 | 1 | 12 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 6 | 4 | 2 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 4 | 1 | 3 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 10 | 4 | 6 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 6 | 1 | 5 |
| 2026 (partial) | 2026-01-01 00:00:00 UTC | 2027-01-01 00:00:00 UTC | 3 | 0 | 3 |
From the project README
An excerpt from the repository, fetched Nov 13, 2026.
Read the project’s introduction
.NET Release Notes
Welcome to the home of .NET release notes and news.
Releases
Releases under active support or development:
Version
Release Date
Release type
Support phase
Latest Patch Version
End of Support
.NET 11.0
November 10, 2026
STS
Go-Live
11.0.0-rc.3
November 10, 2026
.NET 10.0
November 11, 2025
LTS
Active
10.0.14
November 14, 2028
.NET 9.0
November 12, 2024
STS
Maintenance
9.0.22
November 10, 2026
.NET 8.0
November 14, 2023
LTS
Maintenance
8.0.33
November 10, 2026
Release notes
Binaries and installers
Installation docs
dotnet-install scripts
Discussions
Follow GitHub Discussions, where you will find the latest news on releases, including PSAs and CVEs.
You can subscribe to discussions with the following RSS feeds:
Category
GitHub Discussions
RSS Feed
All Discussions
🔗
🔗
News
🔗
🔗
General
🔗
🔗
Read the full README on GitHubWhat Hacker News says
6 sourcesI am usually a big critic of Go's design, but if the option is between C or Go, I would rather put up with Go.
F# has suffered from Microsoft not really caring that much, it almost feels that management has repented to have added into Visual Studio 2010, and now mostly carries it around, based on the work of volunteers, with a rather small team.
Even the release notes aren't part of .NET proper,
While VB folks document directly what is changing,
https://github.com/dotnet/core/blob/main/release-notes/10.0/...
F# notes tell readers to click into yet another link to the F# repo,
https://github.com/dotnet/core/blob/main/release-notes/10.0/...
https://fsharp.github.io/fsharp-compiler-docs/release-notes/...
In Capture Checking in Scala> hypothetical cold start times
Long standing complaint about .NET / .NET Core
2017 Github issue: https://github.com/dotnet/core/issues/1060
2018 Github issue: https://github.com/dotnet/core/issues/1968
Regular people complaining, asking, and writing about it for years: https://duckduckgo.com/?t=ffab&q=cold+start+NET.&ia=web
Right up to this thread, today.
Why are you denying that this exists?
In Run a C# file directly using dotnet run app.csnope, still recovering: https://github.com/dotnet/core/blob/main/release-notes/10.0/...
In Past, present, and future of Sorbet type syntaxYes, like I said before, Phoenix 1.0 predates the first open-source and Linux-supported .NET release by a year.
https://news.ycombinator.com/item?id=10135825
https://github.com/dotnet/core/blob/main/release-notes%2F1.0...
People aren't just going to jump onto something recently open-sourced by a company that popularized the phrase "embrace, extend, extinguish". For the last decade, they've had to earn people's goodwill, while with a project like Rails, there is no "we used to be closed source but now we're not, use our thing!" to overcome. So in the 20 years since Rails has been released, it has only ever needed to demonstrate its usefulness.
Now that a decade has past, that negative association is starting to wash away a little.
In The One-Person Framework in PracticeC# 14 updates in .NET 10 Preview 3 – Release Notes
1 points · Open discussion