GHSA-23cv-jh4v-vffm
GitHub Security Advisory
Denial of service in ASP.NET Core
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
Affected Packages
NuGet
Microsoft.AspNetCore.All
Affected versions:
2.1.0
(fixed in 2.1.15)
NuGet
Microsoft.AspNetCore.App
Affected versions:
3.1.0
(fixed in 3.1.1)
NuGet
Microsoft.AspNetCore.App
Affected versions:
3.0.0
(fixed in 3.0.1)
NuGet
Microsoft.AspNetCore.App
Affected versions:
2.1.0
(fixed in 2.1.15)
NuGet
Microsoft.AspNetCore.Http.Connections
Affected versions:
1.0.0
(fixed in 1.0.15)
NuGet
Microsoft.AspNetCore.App.Runtime.linux-arm
Affected versions:
3.1.0
(fixed in 3.1.1)
NuGet
Microsoft.AspNetCore.App.Runtime.linux-arm64
Affected versions:
3.1.0
(fixed in 3.1.1)
NuGet
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
Affected versions:
3.1.0
(fixed in 3.1.1)
NuGet
Microsoft.AspNetCore.App.Runtime.linux-x64
Affected versions:
3.1.0
(fixed in 3.1.1)
NuGet
Microsoft.AspNetCore.App.Runtime.osx-x64
Affected versions:
3.1.0
(fixed in 3.1.1)
NuGet
Microsoft.AspNetCore.App.Runtime.win-arm
Affected versions:
3.1.0
(fixed in 3.1.1)
NuGet
Microsoft.AspNetCore.App.Runtime.win-x64
Affected versions:
3.1.0
(fixed in 3.1.1)
NuGet
Microsoft.AspNetCore.App.Runtime.win-x86
Affected versions:
3.1.0
(fixed in 3.1.1)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: June 12, 2025 6:24 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.