{"action":"Upgrade System.Security.Cryptography.Cose to 8.0.2 (8.x), 9.0.13 (9.x) or 10.0.3 (10.x) or later.","affected":[{"fixed":"8.0.2","introduced":"8.0.0"},{"fixed":"9.0.13","introduced":"9.0.0"},{"fixed":"10.0.3","introduced":"10.0.0"}],"component":"System.Security.Cryptography.Cose","cve_ids":["CVE-2026-21218"],"ecosystem":"NuGet","exploited":false,"fixed_versions":["8.0.2","9.0.13","10.0.3"],"ghsa_id":"GHSA-qvhc-9v3j-5rfw","id":"tcs_01M5N8Z16ECGBTGRH0PMEZJSZX","modified_at":"2026-09-10T03:50:59.933696221Z","published_at":"2026-02-10T21:32:18Z","references":["https://osv.dev/vulnerability/GHSA-qvhc-9v3j-5rfw","https://github.com/dotnet/runtime/security/advisories/GHSA-qvhc-9v3j-5rfw","https://nvd.nist.gov/vuln/detail/CVE-2026-21218","https://github.com/dotnet/runtime","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21218"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-qvhc-9v3j-5rfw","url":"https://osv.dev/vulnerability/GHSA-qvhc-9v3j-5rfw"}],"summary":"Microsoft Security Advisory CVE-2026-21218 | .NET Security Feature Bypass Vulnerability"}