The 10.3 release is a major release which includes developer productivity, usability, security and performance improvements.
Security
Recent improvements in AI have resulted in greater capability for performing static analysis of source code, as well as run-time observability. This has resulted in an exponential increase in security vulnerability reports across the entire software industry. And although patching creates additional challenges for maintaining your infrastructure, it also helps ensure your software platforms are protected from malicious use.
The 10.3 release includes fixes for a number of security vulnerabilities which were reported confidentially via the Oqtane Security Center. The Oqtane Security Center allows you to quickly check the status of your Oqtane installation by specifying the framework version you currently have installed. You are encouraged to visit the Oqtane Security Center regularly to validate the integrity of your Oqtane installations.
The 10.3 release has also been upgraded to the latest .NET SDK version 10.0.14. Microsoft released .NET 10.0.14 on October 25, 2026, as an out-of-band security update to address a number of critical vulnerabilities. This includes a fix for CVE-2026-111497 - Brotli Decoder Out-of-Bounds Write (Node2Shell or HTTP2Shell) which can lead to memory corruption, information disclosure, denial of service (DoS), or elevation of privilege when processing untrusted Brotli-compressed data in APIs like HttpClient, ASP.NET Core, or System.IO.Compression.
The 10.3 release also includes updates to ImageSharp, an open source .NET 2D graphics library. A number of vulnerabilities were identified in prior versions of ImageSharp related to TIFF and GIF decoders/encoders, heap corruption, and information disclosure. The list of CVE's include CVE-2026-106118, CVE-2026-106115, CVE-2026-106113, CVE-2026-106110, CVE-2026-106111.
It is highly recommended that Oqtane users upgrade to version 10.3 as soon as possible.
Open Source
To date, the open source project has recorded over 3716 pull requests from 58 contributors and has published 75 official releases, which ranks it among the most active open source projects within the .NET Foundation. The Oqtane framework continues to evolve at a rapid pace to meet the needs of .NET developers. The 10.3 release is available for download on Github and is running in production at https://www.oqtane.org, https://www.blazorcms.net, and https://www.blazorkit.net.