user@runtime:~/blog$ grep -l "cve" posts/*.md

cve

1 post tagged with cve.

2026-04-30 9m

CVE-2026-40372: The ASP.NET Core Data Protection Flaw That Demands More Than a Patch

A critical HMAC validation bug in Microsoft.AspNetCore.DataProtection lets attackers forge authentication cookies and decrypt protected payloads. Upgrading to 10.0.7 fixes the code, but key rotation and artifact auditing are essential to close the window fully.