cve 2026-40372

The vulnerability in CVE-2026-40372 is the kind of ASP.NET Core issue that hides in plain sight: many teams will see the package in their dependency graph, assume they are covered by the shared framework, and miss the fact that the NuGet copy may be the one actually executing at runtime...