Hi everyone,
We’ve just released Particular.Aspire.Hosting.ServicePlatform 1.1.1.
Fixed bugs
- #96 Monitoring instance never becomes healthy when authentication is enabled on ServiceControl 6.21.2 or later
- #105 GitHub Security Advisory ID (GHSA-qhrr-8q5h-9q3h) reported on branch release-1.1
How to know if you are affected
You are affected by #96 if:
- You use Particular.Aspire.Hosting.ServicePlatform 1.0.0 to 1.1.0, and
- You run a ServiceControl Monitoring instance version 6.21.2 or later (the default
latestimage tag), and - Authentication is enabled on the ServiceControl Monitoring instance.
You are affected by #105 if your AppHost uses Particular.Aspire.Hosting.ServicePlatform 1.1.0 or earlier and resolves MessagePack 2.5.302 or earlier. MessagePack versions before 2.5.303 have CVE-2026-92707.
Symptoms
For #96, the monitoring resource never becomes healthy. The Aspire dashboard shows it as Unhealthy, and the health check reports that the endpoint returns Unauthorized. Because of this, the platform resource never reaches Running, and resources that wait for the platform or for the monitoring resource do not start.
For #105, the restore of the AppHost reports NU1902 for MessagePack 2.5.302. When warnings are treated as errors, the restore fails.
When to upgrade
You should upgrade immediately if you are affected by #96 or by CVE-2026-92707. Otherwise, you should upgrade during your next maintenance window.
Where to get it
You can install Particular.Aspire.Hosting.ServicePlatform 1.1.1 from NuGet.
Please read our release policy for more details.
With thanks,
The team in Particular