Skip to content
cve.newCreate a CVE report

Aspire.Hosting.AppHost

Follow this package

Get the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.

Check the version you ship.

Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.

Advisories & recorded fixes

high7.5
CVE-2026-120006Package fixes recorded

Microsoft Security Advisory CVE-2026-120006 - Aspire Elevation of Privilege Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in Aspire. This advisory provides guidance on updating affected applications and components.

Recorded fixes — Aspire.Hosting.AppHost: 13.6.5; Aspire.Hosting: 13.6.5. Check your release branch.

Exploitation not established

NuGet / Aspire.Hosting.AppHostNuGet / Aspire.Hosting
Aspire.Hosting.AppHost NuGet
Affected range Recorded fix
Earlier releases before 13.6.5Ecosystem versions13.6.5

Version evidence: OSV · GHSA-f7vh-h5g3-7jrh

View original version evidence
{
  "ranges": [
    {
      "events": [
        {
          "introduced": "0"
        },
        {
          "fixed": "13.6.5"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "13.0.0",
    "13.0.1",
    "13.0.2",
    "13.1.0",
    "13.1.1",
    "13.1.2",
    "13.1.3",
    "13.2.0",
    "13.2.1",
    "13.2.2",
    "13.2.3",
    "13.2.4",
    "13.3.0",
    "13.3.1",
    "13.3.2",
    "13.3.3",
    "13.3.4",
    "13.3.5",
    "13.4.0",
    "13.4.1",
    "13.4.2",
    "13.4.3",
    "13.4.4",
    "13.4.5",
    "13.4.6",
    "13.5.0",
    "13.5.1",
    "13.5.2",
    "13.5.3",
    "13.5.4",
    "13.6.0",
    "13.6.1",
    "13.6.2",
    "13.6.3",
    "13.6.4",
    "8.0.0",
    "8.0.1",
    "8.0.2",
    "8.1.0",
    "8.2.0",
    "8.2.1",
    "8.2.2",
    "9.0.0",
    "9.1.0",
    "9.2.0",
    "9.2.1",
    "9.3.0",
    "9.3.1",
    "9.4.0",
    "9.4.1",
    "9.4.2",
    "9.5.0",
    "9.5.1",
    "9.5.2"
  ]
}