Microsoft's Security Advisory CVE-2026-69304 hits ASP․NET Core, a denial of service vulnerability. ASP․NET Core's MEV `IValidationMessageFormatter` is superseded by `ValidationAttribute․FormatMessage`, which the BCL now provides. The interface gets dropped in favor of the base class method. F# ships new Task and Async helpers: `parallelLimit`, `parallelDoLimit`, and `sequential`, part of the proposals in fslang-suggestions. .NET's skills repo adds an NUnit 3/4 to MSTest v4 migration skill, classifying all 48 attributes in NUnit's official attribute index. The MAUI NuGet config pinning fix shares manifest resolution and feed fallback between commit discovery and workload installation, reading package metadata from the selected feed. The change follows dotnet12 being added, when commit discovery found no mobile manifests there. #dotnet https://repojournal.com/showcase/dotnet/2026-09-09/cve-2026-69304-opens-in-asp-net-core-caching-and-validation-apis-shift
Post summary
Microsoft released a security advisory for CVE-2026-69304, a denial‑of‑service issue in ASP.NET Core, providing technical details on the affected API but offering no patch info or exploit evidence.