Post

If you're doing #dotnet things, are using #Brotli, and are on v10, you NEED to install this update! #Http2Shell #Node2Shell github.com/dotnet/core/...

github.comcore/release-notes/10.0/10.0.14/10.0.14.md at main · dotnet/core.NET news, announcements, release notes, and more! - dotnet/core

25/10/26, 6:10 pm1 repost1 like

Jamie Taylor

@gaprogman.com

Point to remember: versions 8, 9, and 11 are also vulnerable. But there isn't (as yet) an update for them. Any #dotnet which uses the vulnerable version of the Brotli library is vulnerable. So there MIGHT be out of support versions. Please check. Don't assume you're safe.

Jamie Taylor

@gaprogman.com

Looking at the git diff for the above release notes, there are updates for #dotnet versions 8, 9, 10, AND 11. Looks like some people's first task tomorrow is to upgrade the runtime for their apps. github.com/dotnet/core/...

github.com.NET October 25, 2026 OOB security releases (8.0.33, 9.0.22, 10.0.14,… · dotnet/core@6087133… 11.0.0-rc.3) (#10661) * Prepare October 25 .NET OOB security releases for 8, 9, 10 and 11 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 0241e55f-cb...