Search results

Support Device Bound Session Credentials (DBSC)

area-identityIncludes: Identity and providersIncludes: Identity and providers

area-security

feature-request

Status: Open.

Feature

#66478 In dotnet/aspnetcore;

· blowdart opened on Apr 26, 2026

Passkey CreatedAt ignores TimeProvider

area-identityIncludes: Identity and providersIncludes: Identity and providers

bugThis issue describes a behavior which is not expected - a bug.This issue describes a behavior which is not expected - a bug.

Status: Open.

#66477 In dotnet/aspnetcore;

· ridercz opened on Apr 25, 2026

Issue Triage Agent for dotnet/aspnetcore doesn't know what the current .net version is

area-infrastructureIncludes: MSBuild projects/targets, build scripts, CI, Installers and shared frameworkIncludes: MSBuild projects/targets, build scripts, CI, Installers and shared framework

bugThis issue describes a behavior which is not expected - a bug.This issue describes a behavior which is not expected - a bug.

Status: Open.

#66476 In dotnet/aspnetcore;

· AdmiralSnyder opened on Apr 25, 2026

Blazor HeadOutlet rendering creates blank intermediate states

area-blazorIncludes: Blazor, Razor ComponentsIncludes: Blazor, Razor Components

bugThis issue describes a behavior which is not expected - a bug.This issue describes a behavior which is not expected - a bug.

Status: Open.

#66475 In dotnet/aspnetcore;

· AdmiralSnyder opened on Apr 25, 2026

WebApplication.CreateBuilder grumble System.IO.DirectoryNotFoundException for wwwroot when debugging

area-hostingIncludes HostingIncludes Hosting

bugThis issue describes a behavior which is not expected - a bug.This issue describes a behavior which is not expected - a bug.

Status: Open.

#66472 In dotnet/aspnetcore;

· ahdung opened on Apr 25, 2026

.NET 9 + OpenAPI: InvalidOperationException - cannot resolve IOptionsSnapshot from root provider

area-minimalIncludes minimal APIs, endpoint filters, parameter binding, request delegate generator etcIncludes minimal APIs, endpoint filters, parameter binding, request delegate generator etc

bugThis issue describes a behavior which is not expected - a bug.This issue describes a behavior which is not expected - a bug.

feature-openapi

Status: Open.

#66470 In dotnet/aspnetcore;

· johncrim opened on Apr 25, 2026

[dotnet watch with hot reload]There is an error "Exited with error code -1" when pressing Ctrl+C to exit dotnet-watch for web project after installing 11.0 P4 SDK

area-commandlinetoolsIncludes: Command line tools, dotnet-dev-certs, dotnet-user-jwts, and OpenAPIIncludes: Command line tools, dotnet-dev-certs, dotnet-user-jwts, and OpenAPI

bugThis issue describes a behavior which is not expected - a bug.This issue describes a behavior which is not expected - a bug.

Status: Open.

#66454 In dotnet/aspnetcore;

· jinzhao1127 opened on Apr 24, 2026

[blazor][wasm] adopt download() runtime API for render mode auto

arch-wasm

area-blazorIncludes: Blazor, Razor ComponentsIncludes: Blazor, Razor Components

feature-request

Status: Open.

#66439 In dotnet/aspnetcore;

· pavelsavara opened on Apr 23, 2026

·  

11.0-preview7

RateLimitingMiddleware never disposes PartitionedRateLimiter causing memory leak

area-middlewareIncludes: URL rewrite, redirect, response cache/compression, session, and other general middlewaresIncludes: URL rewrite, redirect, response cache/compression, session, and other general middlewares

bugThis issue describes a behavior which is not expected - a bug.This issue describes a behavior which is not expected - a bug.

feature-rate-limitWork related to use of rate limit primitivesWork related to use of rate limit primitives

Status: Open.

#66434 In dotnet/aspnetcore;

· kvantetore opened on Apr 23, 2026

Missing release tag for dotnet/aspnetcore v10.0.7

area-infrastructureIncludes: MSBuild projects/targets, build scripts, CI, Installers and shared frameworkIncludes: MSBuild projects/targets, build scripts, CI, Installers and shared framework

question

Status: Open.

#66431 In dotnet/aspnetcore;

· jekula opened on Apr 23, 2026

DefaultActionDescriptorCollectionProvider never disposes the handle returned by ChangeToken.Change(...)

area-mvcIncludes: MVC, Actions and Controllers, Localization, CORS, most templatesIncludes: MVC, Actions and Controllers, Localization, CORS, most templates

bugThis issue describes a behavior which is not expected - a bug.This issue describes a behavior which is not expected - a bug.

Status: Open.

#66425 In dotnet/aspnetcore;

· kvantetore opened on Apr 22, 2026

Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege

area-dataprotectionIncludes: DataProtectionIncludes: DataProtection

bugThis issue describes a behavior which is not expected - a bug.This issue describes a behavior which is not expected - a bug.

Security

Status: Open.

#66410 In dotnet/aspnetcore;

· bribrothers opened on Apr 21, 2026