Issues

• [Review agent] Distinguish primary errors from newly suppressed secondary failures (#69445)

  dotnet/aspnetcore#70269 · Filter by author maraf opened on Nov 3, 2026
  1

• [Blazor] AuthorizeView should support requirements.

  area-blazor
  Feature

  dotnet/aspnetcore#70268 · Filter by author LasseHerget opened on Nov 3, 2026
  1

• ResponseCookies.Append overloads should all throw ArgumentException for invalid cookie names

  area-networking
  Bug

  dotnet/aspnetcore#70267 · Filter by author Youssef1313 opened on Nov 3, 2026
  1

• Blazor WebAssembly boots into a stale page when an enhanced navigation happens during startup

  area-blazor
  Bug

  dotnet/aspnetcore#70266 · Filter by author 30yowizard opened on Nov 3, 2026
  1

  

• TestHost: IRequestBodyPipeFeature is added mid-request on first Request.BodyReader access, racing with gRPC duplex streaming response writes (intermittent NullReferenceException only under TestServer)

  Bug

  dotnet/aspnetcore#70262 · Filter by author TakashiArakane opened on Nov 3, 2026
  1

• SignalR Java client allocates binary values before validating MessagePack lengths

  area-signalr
  Bug

  dotnet/aspnetcore#70259 · Filter by author BrennanConroy opened on Nov 2, 2026
  

• CertificateAuthenticationHandler: the Name claim and the X500DistinguishedName claim disagree about the subject

  area-auth
  dotnet/aspnetcore#70257 · Filter by author earbona23 opened on Nov 2, 2026
  1

• Embedding components in MVC views and Razor Pages with Blazor Web App

  area-blazor
  Feature

  dotnet/aspnetcore#70254 · Filter by author oroztocil opened on Nov 2, 2026 · Backlog
  1

• Embedding components in JS apps with Blazor Web App

  area-blazor
  Feature

  dotnet/aspnetcore#70253 · Filter by author oroztocil opened on Nov 2, 2026 · Backlog

• MVC validation repeatedly traverses shared object graphs without any limit

  area-mvc
  dotnet/aspnetcore#70252 · Filter by author cincuranet opened on Nov 2, 2026

• ModelState.IsValid returns true for errors at the default depth boundary

  area-mvc
  Bug

  dotnet/aspnetcore#70251 · Filter by author cincuranet opened on Nov 2, 2026
  1

• Harden MapStaticAssets headers for authorization-gated endpoints

  area-middleware
  dotnet/aspnetcore#70249 · Filter by author DeagleGross opened on Nov 2, 2026 · Backlog
  1

• Potential memory leak in Microsoft.AspNetCore.Components.Web.HtmlRenderer

  area-blazorNeeds: Attention 👋
  Bug

  dotnet/aspnetcore#70245 · Filter by author adams85 opened on Nov 2, 2026 · Backlog
  4

  

• Kestrel HTTP/2 performs only two of the four field validations RFC 9113 8.2.1 requires: a space or a colon in a header name, and leading or trailing whitespace in a value, are accepted

  area-networkingfeature-kestrel
  Bug

  dotnet/aspnetcore#70237 · Filter by author earbona23 opened on Nov 1, 2026

• [Review agent] Incorrect instrument-duplication claim and ineffective test fix on #70174

  dotnet/aspnetcore#70233 · Filter by author PureWeen opened on Nov 1, 2026
  1

• [Review agent] False positive: MessagePack count validation ignored on #70143

  dotnet/aspnetcore#70232 · Filter by author PureWeen opened on Nov 1, 2026
  1

• Review Agent Failure Tracking

  Epic

  dotnet/aspnetcore#70231 · Filter by author PureWeen opened on Nov 1, 2026
  1

  

• ASP.NET Core's Web JSON preset keeps AllowDuplicateProperties enabled, and JsonElement has no case-insensitive lookup, so inspect-then-bind diverges

  area-minimal
  Feature

  dotnet/aspnetcore#70230 · Filter by author earbona23 opened on Nov 1, 2026

• Request Delegate Generator returns HTTP 500 instead of 400 for failed form antiforgery validation (.NET 10 and 11 RC3)

  area-minimal
  Bug

  dotnet/aspnetcore#70229 · Filter by author DamianEdwards opened on Nov 1, 2026
  1

• ASP.NET Core perf effort: summary of open performance PRs

  area-perfperformance
  dotnet/aspnetcore#70219 · Filter by author davidfowl opened on Nov 1, 2026
  4

  

• IResponseCookies.Append: the ReadOnlySpan overload does not validate the cookie name that the other two reject

  area-networking
  dotnet/aspnetcore#70217 · Filter by author earbona23 opened on Nov 1, 2026

• Passkey ceremony state is stored in the two-factor cookie, so a passkey ceremony and a pending two-factor sign-in destroy each other

  area-identity
  Bug

  dotnet/aspnetcore#70207 · Filter by author earbona23 opened on Nov 1, 2026
  1

• MapStaticAssets: an asset file name is parsed as a route template, so braces in a name silently add a route parameter or stop the app from starting

  area-middleware
  Bug

  dotnet/aspnetcore#70206 · Filter by author earbona23 opened on Nov 1, 2026

• Include host.wslc.internal in the HTTPS development certificate

  area-commandlinetools
  Feature

  dotnet/aspnetcore#70122 · Filter by author afscrome opened on Oct 30, 2026
  1

• Improve AddApplicationPart use case

  area-mvc
  Feature

  dotnet/aspnetcore#70096 · Filter by author ryagin opened on Oct 29, 2026
  1