We have released v1.4.2 and v1.5.2 of CoreWCF and are now available from nuget.org.
These releases address a security vulnerability where a CoreWCF service using a NetFraming based binding (NetTcpBinding, UnixDomainSocketBinding) can leave a connection established instead of closing or aborting it.
Release Notes:
https://github.com/CoreWCF/CoreWCF/releases/tag/v1.5.2
https://github.com/CoreWCF/CoreWCF/releases/tag/v1.4.2