Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

GHSA-f8qx-mjcq-wfgx

GitHub Security Advisory

ASP.NET Core Denial of Service Vulnerability

✓ GitHub Reviewed HIGH Has CVE
View on GitHub

Advisory Details

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka `ASP.NET Core Denial of Service Vulnerability`.

Affected Packages

NuGet Microsoft.AspNetCore.App
Affected versions: 2.1.0 (fixed in 2.1.21)
NuGet Microsoft.AspNetCore.All
Affected versions: 2.1.0 (fixed in 2.1.21)
NuGet Microsoft.AspNetCore.App.Runtime.linux-arm
Affected versions: 3.1.0 (fixed in 3.1.7)
NuGet Microsoft.AspNetCore.App.Runtime.linux-arm64
Affected versions: 3.1.0 (fixed in 3.1.7)
NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
Affected versions: 3.1.0 (fixed in 3.1.7)
NuGet Microsoft.AspNetCore.App.Runtime.linux-musl-x64
Affected versions: 3.1.0 (fixed in 3.1.7)
NuGet Microsoft.AspNetCore.App.Runtime.linux-x64
Affected versions: 3.1.0 (fixed in 3.1.7)
NuGet Microsoft.AspNetCore.App.Runtime.osx-x64
Affected versions: 3.1.0 (fixed in 3.1.7)
NuGet Microsoft.AspNetCore.App.Runtime.win-arm
Affected versions: 3.1.0 (fixed in 3.1.7)
NuGet Microsoft.AspNetCore.App.Runtime.win-arm64
Affected versions: 3.1.0 (fixed in 3.1.7)
NuGet Microsoft.AspNetCore.App.Runtime.win-x64
Affected versions: 3.1.0 (fixed in 3.1.7)
NuGet Microsoft.AspNetCore.App.Runtime.win-x86
Affected versions: 3.1.0 (fixed in 3.1.7)

Related CVEs

CVE-2020-1597

Key Information

GHSA ID
GHSA-f8qx-mjcq-wfgx
Published
May 24, 2022 5:26 PM
Last Modified
October 24, 2022 4:40 PM
CVSS Score
7.5 /10
Primary Ecosystem
NuGet
Primary Package
Microsoft.AspNetCore.App
GitHub Reviewed
✓ Yes

Dataset

Last updated: June 12, 2025 6:24 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.