Hi everyone,
We’ve just released patches for some of our components to update their dependencies to avoid references that have the GHSA-w3x6-4m5h-cxqf security advisory: Microsoft Security Advisory CVE-2026-26171 – .NET Denial of Service Vulnerability .
Patch releases
| Component | Version | Where to get it |
|---|---|---|
| NServiceBus | 10.0.3 | NuGet |
| NServiceBus.AcceptanceTesting | 10.0.3 | NuGet |
| NServiceBus.AcceptanceTests.Sources | 10.0.3 | NuGet |
| NServiceBus.PersistenceTests.Sources | 10.0.3 | NuGet |
| NServiceBus.TransportTests.Sources | 10.0.3 | NuGet |
| NServiceBus | 10.1.4 | NuGet |
| NServiceBus.AcceptanceTesting | 10.1.4 | NuGet |
| NServiceBus.AcceptanceTests.Sources | 10.1.4 | NuGet |
| NServiceBus.PersistenceTests.Sources | 10.1.4 | NuGet |
| NServiceBus.TransportTests.Sources | 10.1.4 | NuGet |
| NServiceBus | 8.2.7 | NuGet |
| NServiceBus.AcceptanceTesting | 8.2.7 | NuGet |
| NServiceBus.AcceptanceTests.Sources | 8.2.7 | NuGet |
| NServiceBus.PersistenceTests.Sources | 8.2.7 | NuGet |
| NServiceBus.TransportTests.Sources | 8.2.7 | NuGet |
| NServiceBus | 9.2.11 | NuGet |
| NServiceBus.AcceptanceTesting | 9.2.11 | NuGet |
| NServiceBus.AcceptanceTests.Sources | 9.2.11 | NuGet |
| NServiceBus.PersistenceTests.Sources | 9.2.11 | NuGet |
| NServiceBus.TransportTests.Sources | 9.2.11 | NuGet |
| NServiceBus.AmazonSQS | 6.2.2 | NuGet |
| NServiceBus.AmazonSQS.CommandLine | 6.2.2 | NuGet or dotnet tool update --g NServiceBus.AmazonSQS.CommandLine --v 6.2.2 |
| NServiceBus.AmazonSQS | 7.3.1 | NuGet |
| NServiceBus.AmazonSQS.CommandLine | 7.3.1 | NuGet or dotnet tool update --g NServiceBus.AmazonSQS.CommandLine --v 7.3.1 |
| NServiceBus.AmazonSQS | 8.0.2 | NuGet |
| NServiceBus.AmazonSQS.CommandLine | 8.0.2 | NuGet or dotnet tool update --g NServiceBus.AmazonSQS.CommandLine --v 8.0.2 |
| NServiceBus.AmazonSQS | 8.1.1 | NuGet |
| NServiceBus.AmazonSQS.CommandLine | 8.1.1 | NuGet or dotnet tool update --g NServiceBus.AmazonSQS.CommandLine --v 8.1.1 |
| NServiceBus.AmazonSQS | 9.0.1 | NuGet |
| NServiceBus.AmazonSQS.CommandLine | 9.0.1 | NuGet or dotnet tool update --g NServiceBus.AmazonSQS.CommandLine --v 9.0.1 |
| NServiceBus.AwsLambda.SQS | 1.1.3 | NuGet |
| NServiceBus.AwsLambda.SQS | 2.1.1 | NuGet |
| NServiceBus.AwsLambda.SQS | 3.0.2 | NuGet |
| NServiceBus.AwsLambda.SQS | 3.1.1 | NuGet |
| NServiceBus.AwsLambda.SQS | 4.0.1 | NuGet |
| NServiceBus.AzureFunctions.InProcess.ServiceBus | 5.0.2 | NuGet |
| NServiceBus.AzureFunctions.InProcess.ServiceBus | 6.0.2 | NuGet |
| NServiceBus.AzureFunctions.Worker.ServiceBus | 6.0.2 | NuGet |
| NServiceBus.Transport.AzureStorageQueues | 12.0.6 | NuGet |
| NServiceBus.Transport.AzureStorageQueues | 13.0.5 | NuGet |
| NServiceBus.Transport.AzureStorageQueues | 14.0.1 | NuGet |
| NServiceBus.Callbacks | 4.0.3 | NuGet |
| NServiceBus.Callbacks.Testing | 4.0.3 | NuGet |
| NServiceBus.Callbacks | 6.0.1 | NuGet |
| NServiceBus.Callbacks.Testing | 6.0.1 | NuGet |
| NServiceBus.ClaimCheck | 1.0.2 | NuGet |
| NServiceBus.ClaimCheck | 2.0.1 | NuGet |
| NServiceBus.CustomChecks | 4.0.2 | NuGet |
| NServiceBus.CustomChecks | 5.0.2 | NuGet |
| NServiceBus.CustomChecks | 6.0.1 | NuGet |
| NServiceBus.DataBus.AzureBlobStorage | 5.0.2 | NuGet |
| NServiceBus.DataBus.AzureBlobStorage | 6.1.4 | NuGet |
| NServiceBus.DataBus.AzureBlobStorage | 7.0.1 | NuGet |
| NServiceBus.Encryption.MessageProperty | 4.0.3 | NuGet |
| NServiceBus.Encryption.MessageProperty | 5.0.3 | NuGet |
| NServiceBus.Encryption.MessageProperty | 6.0.2 | NuGet |
| NServiceBus.Envelope.CloudEvents | 1.0.1 | NuGet |
| NServiceBus.Extensions.Hosting | 2.0.2 | NuGet |
| NServiceBus.Extensions.Hosting | 3.0.2 | NuGet |
| NServiceBus.Extensions.Hosting | 4.0.1 | NuGet |
| NServiceBus.Extensions.Logging | 2.0.2 | NuGet |
| NServiceBus.Extensions.Logging | 3.0.2 | NuGet |
| NServiceBus.Extensions.Logging | 4.0.1 | NuGet |
| NServiceBus.Gateway.RavenDB | 3.0.2 | NuGet |
| NServiceBus.Gateway.RavenDB | 4.0.2 | NuGet |
| NServiceBus.Gateway.RavenDB | 5.1.1 | NuGet |
| NServiceBus.Gateway.RavenDB | 6.0.1 | NuGet |
| NServiceBus.Gateway.Sql | 2.0.2 | NuGet |
| NServiceBus.Gateway.Sql | 3.0.2 | NuGet |
| NServiceBus.Gateway.Sql | 4.0.1 | NuGet |
| NServiceBus.Heartbeat | 4.0.2 | NuGet |
| NServiceBus.Heartbeat | 5.0.2 | NuGet |
| NServiceBus.Heartbeat | 6.0.1 | NuGet |
| NServiceBus.MessagingBridge | 2.3.4 | NuGet |
| NServiceBus.MessagingBridge.Msmq | 2.3.4 | NuGet |
| NServiceBus.MessagingBridge | 4.0.5 | NuGet |
| NServiceBus.MessagingBridge.Msmq | 4.0.5 | NuGet |
| NServiceBus.MessagingBridge | 5.0.2 | NuGet |
| NServiceBus.MessagingBridge.Msmq | 5.0.2 | NuGet |
| NServiceBus.Metrics | 4.0.2 | NuGet |
| NServiceBus.Metrics | 5.0.2 | NuGet |
| NServiceBus.Metrics | 6.0.1 | NuGet |
| NServiceBus.Metrics.PerformanceCounters | 5.0.2 | NuGet |
| NServiceBus.Metrics.PerformanceCounters | 6.0.1 | NuGet |
| NServiceBus.Metrics.PerformanceCounters | 7.0.1 | NuGet |
| NServiceBus.Newtonsoft.Json | 3.0.2 | NuGet |
| NServiceBus.Newtonsoft.Json | 4.1.1 | NuGet |
| NServiceBus.Newtonsoft.Json | 5.0.1 | NuGet |
| NServiceBus.NHibernate | 11.0.1 | NuGet |
| NServiceBus.NHibernate.TransactionalSession | 11.0.1 | NuGet |
| NServiceBus.Persistence.AzureTable | 6.1.3 | NuGet |
| NServiceBus.Persistence.AzureTable.TransactionalSession | 6.1.3 | NuGet |
| NServiceBus.Persistence.AzureTable | 7.0.2 | NuGet |
| NServiceBus.Persistence.AzureTable.TransactionalSession | 7.0.2 | NuGet |
| NServiceBus.Persistence.CosmosDB | 2.0.5 | NuGet |
| NServiceBus.Persistence.CosmosDB.TransactionalSession | 2.0.5 | NuGet |
| NServiceBus.Persistence.CosmosDB | 3.2.2 | NuGet |
| NServiceBus.Persistence.CosmosDB.TransactionalSession | 3.2.2 | NuGet |
| NServiceBus.Persistence.CosmosDB | 4.0.1 | NuGet |
| NServiceBus.Persistence.CosmosDB.TransactionalSession | 4.0.1 | NuGet |
| NServiceBus.Persistence.DynamoDB | 1.0.3 | NuGet |
| NServiceBus.Persistence.DynamoDB.TransactionalSession | 1.0.3 | NuGet |
| NServiceBus.Persistence.DynamoDB | 2.2.2 | NuGet |
| NServiceBus.Persistence.DynamoDB.TransactionalSession | 2.2.2 | NuGet |
| NServiceBus.Persistence.DynamoDB | 3.0.2 | NuGet |
| NServiceBus.Persistence.DynamoDB.TransactionalSession | 3.0.2 | NuGet |
| NServiceBus.Persistence.DynamoDB | 4.0.2 | NuGet |
| NServiceBus.Persistence.DynamoDB.TransactionalSession | 4.0.2 | NuGet |
| NServiceBus.Persistence.Sql | 7.0.8 | NuGet |
| NServiceBus.Persistence.Sql.CommandLine | 7.0.8 | NuGet or dotnet tool update --g NServiceBus.Persistence.Sql.CommandLine --v 7.0.8 |
| NServiceBus.Persistence.Sql.ScriptBuilder | 7.0.8 | NuGet |
| NServiceBus.Persistence.Sql.TransactionalSession | 7.0.8 | NuGet |
| NServiceBus.Persistence.Sql | 8.2.1 | NuGet |
| NServiceBus.Persistence.Sql.CommandLine | 8.2.1 | NuGet or dotnet tool update --g NServiceBus.Persistence.Sql.CommandLine --v 8.2.1 |
| NServiceBus.Persistence.Sql.ScriptBuilder | 8.2.1 | NuGet |
| NServiceBus.Persistence.Sql.TransactionalSession | 8.2.1 | NuGet |
| NServiceBus.Persistence.Sql | 8.3.1 | NuGet |
| NServiceBus.Persistence.Sql.CommandLine | 8.3.1 | NuGet or dotnet tool update --g NServiceBus.Persistence.Sql.CommandLine --v 8.3.1 |
| NServiceBus.Persistence.Sql.ScriptBuilder | 8.3.1 | NuGet |
| NServiceBus.Persistence.Sql.TransactionalSession | 8.3.1 | NuGet |
| NServiceBus.Persistence.Sql | 9.0.1 | NuGet |
| NServiceBus.Persistence.Sql.CommandLine | 9.0.1 | NuGet or dotnet tool update --g NServiceBus.Persistence.Sql.CommandLine --v 9.0.1 |
| NServiceBus.Persistence.Sql.ScriptBuilder | 9.0.1 | NuGet |
| NServiceBus.Persistence.Sql.TransactionalSession | 9.0.1 | NuGet |
| NServiceBus.RabbitMQ | 10.1.8 | NuGet |
| NServiceBus.Transport.RabbitMQ.CommandLine | 10.1.8 | NuGet or dotnet tool update --g NServiceBus.Transport.RabbitMQ.CommandLine --v 10.1.8 |
| NServiceBus.RabbitMQ | 11.0.1 | NuGet |
| NServiceBus.Transport.RabbitMQ.CommandLine | 11.0.1 | NuGet or dotnet tool update --g NServiceBus.Transport.RabbitMQ.CommandLine --v 11.0.1 |
| NServiceBus.RabbitMQ | 11.1.1 | NuGet |
| NServiceBus.Transport.RabbitMQ.CommandLine | 11.1.1 | NuGet or dotnet tool update --g NServiceBus.Transport.RabbitMQ.CommandLine --v 11.1.1 |
| NServiceBus.RabbitMQ | 11.2.1 | NuGet |
| NServiceBus.Transport.RabbitMQ.CommandLine | 11.2.1 | NuGet or dotnet tool update --g NServiceBus.Transport.RabbitMQ.CommandLine --v 11.2.1 |
| NServiceBus.RabbitMQ | 8.0.10 | NuGet |
| NServiceBus.Transport.RabbitMQ.CommandLine | 8.0.10 | NuGet or dotnet tool update --g NServiceBus.Transport.RabbitMQ.CommandLine --v 8.0.10 |
| NServiceBus.RabbitMQ | 9.2.3 | NuGet |
| NServiceBus.Transport.RabbitMQ.CommandLine | 9.2.3 | NuGet or dotnet tool update --g NServiceBus.Transport.RabbitMQ.CommandLine --v 9.2.3 |
| NServiceBus.RavenDB | 10.1.1 | NuGet |
| NServiceBus.RavenDB.TransactionalSession | 10.1.1 | NuGet |
| NServiceBus.RavenDB | 11.0.1 | NuGet |
| NServiceBus.RavenDB.TransactionalSession | 11.0.1 | NuGet |
| NServiceBus.RavenDB | 8.2.2 | NuGet |
| NServiceBus.RavenDB.TransactionalSession | 8.2.2 | NuGet |
| NServiceBus.RavenDB | 9.1.1 | NuGet |
| NServiceBus.RavenDB.TransactionalSession | 9.1.1 | NuGet |
| NServiceBus.SagaAudit | 4.0.2 | NuGet |
| NServiceBus.SagaAudit | 5.0.3 | NuGet |
| NServiceBus.SagaAudit | 6.0.1 | NuGet |
| NServiceBus.ServicePlatform.Connector | 2.0.4 | NuGet |
| NServiceBus.ServicePlatform.Connector | 3.0.3 | NuGet |
| NServiceBus.ServicePlatform.Connector | 4.0.1 | NuGet |
| NServiceBus.Transport.PostgreSql | 7.0.13 | NuGet |
| NServiceBus.Transport.SqlServer | 7.0.13 | NuGet |
| NServiceBus.Transport.PostgreSql | 8.1.12 | NuGet |
| NServiceBus.Transport.SqlServer | 8.1.12 | NuGet |
| NServiceBus.Transport.PostgreSql | 9.0.1 | NuGet |
| NServiceBus.Transport.SqlServer | 9.0.1 | NuGet |
| NServiceBus.Storage.MongoDB | 3.0.6 | NuGet |
| NServiceBus.Storage.MongoDB.TransactionalSession | 3.0.6 | NuGet |
| NServiceBus.Storage.MongoDB | 4.2.1 | NuGet |
| NServiceBus.Storage.MongoDB.TransactionalSession | 4.2.1 | NuGet |
| NServiceBus.Storage.MongoDB | 5.0.1 | NuGet |
| NServiceBus.Storage.MongoDB.TransactionalSession | 5.0.1 | NuGet |
| NServiceBus.Storage.MongoDB | 6.0.2 | NuGet |
| NServiceBus.Storage.MongoDB.TransactionalSession | 6.0.2 | NuGet |
| NServiceBus.Storage.MongoDB | 7.0.1 | NuGet |
| NServiceBus.Storage.MongoDB.TransactionalSession | 7.0.1 | NuGet |
| NServiceBus.Testing | 10.0.2 | NuGet |
| NServiceBus.Testing | 8.1.2 | NuGet |
| NServiceBus.Testing | 9.0.2 | NuGet |
| NServiceBus.TransactionalSession | 2.0.4 | NuGet |
| NServiceBus.TransactionalSession | 3.4.2 | NuGet |
| NServiceBus.TransactionalSession | 4.0.2 | NuGet |
| NServiceBus.Transport.AzureServiceBus | 3.2.9 | NuGet |
| NServiceBus.Transport.AzureServiceBus.CommandLine | 3.2.9 | NuGet or dotnet tool update --g NServiceBus.Transport.AzureServiceBus.CommandLine --v 3.2.9 |
| NServiceBus.Transport.AzureServiceBus | 5.1.3 | NuGet |
| NServiceBus.Transport.AzureServiceBus.CommandLine | 5.1.3 | NuGet or dotnet tool update --g NServiceBus.Transport.AzureServiceBus.CommandLine --v 5.1.3 |
| NServiceBus.Transport.AzureServiceBus | 6.0.1 | NuGet |
| NServiceBus.Transport.AzureServiceBus.CommandLine | 6.0.1 | NuGet or dotnet tool update --g NServiceBus.Transport.AzureServiceBus.CommandLine --v 6.0.1 |
| NServiceBus.Transport.AzureServiceBus | 6.1.1 | NuGet |
| NServiceBus.Transport.AzureServiceBus.CommandLine | 6.1.1 | NuGet or dotnet tool update --g NServiceBus.Transport.AzureServiceBus.CommandLine --v 6.1.1 |
| NServiceBus.Transport.Msmq | 2.0.7 | NuGet |
| NServiceBus.UniformSession | 3.0.2 | NuGet |
| NServiceBus.UniformSession.Testing | 3.0.2 | NuGet |
| NServiceBus.UniformSession | 4.0.2 | NuGet |
| NServiceBus.UniformSession.Testing | 4.0.2 | NuGet |
| NServiceBus.UniformSession | 5.0.1 | NuGet |
| NServiceBus.UniformSession.Testing | 5.0.1 | NuGet |
| NServiceBus.Wcf | 3.0.2 | NuGet |
| ServiceControl | 6.14.2 | Our website |
| Particular.ServiceControl.Management | 6.14.2 | Update-Module -Name Particular.ServiceControl.Management -RequiredVersion 6.14.2 |
| servicecontrol | 6.14.2 | Docker Hub or docker pull particular/servicecontrol:6.14.2 |
| servicecontrol-audit | 6.14.2 | Docker Hub or docker pull particular/servicecontrol-audit:6.14.2 |
| servicecontrol-monitoring | 6.14.2 | Docker Hub or docker pull particular/servicecontrol-monitoring:6.14.2 |
| servicecontrol-ravendb | 6.14.2 | Docker Hub or docker pull particular/servicecontrol-ravendb:6.14.2 |
How to know if you are affected
You are affected if you are using previous versions of any of these components, but this doesn’t necessarily mean you are vulnerable.
Symptoms
For NuGet packages your projects have the setting NuGetAuditMode set to all and see transitive dependency warnings at build time that mention Particular packages.
Other components of the platform will not have any symptoms.
When to upgrade
You should upgrade immediately if you are affected. Otherwise, you should upgrade during your next maintenance window.
With thanks,
The team in Particular