undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
CVE-2026-16729
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
Microsoft Visual Studio 2026 version 18.10
Microsoft Visual Studio 2022 version 17.14
.NET 11.0 installed on Linux
.NET 11.0 installed on Mac OS
Release Notes
18.10.4
17.14.42
11.0.0-rc.2
The publication date reported by the vendor.
We collected the advisory from the official source.
Our collector saw this advisory during a later source check.