Microsoft has released out-of-band (OOB) security updates to patch a critical ASP.NET Core privilege escalation vulnerability ...
"A regression in the Microsoft.AspNetCore.DataProtection 10.0.0-10.0.6 NuGet packages cause the managed authenticated ...
Patching is not enough: applications embedding the insecure library will need to be rebuilt, and affected tokens and cookies ...
We know that the ability is baked into ASP.net to handle the security model that we are looking for, but our project management would prefer a pre-built solution as even a 200 hour build time increase ...