YARP Denial of Service Vulnerability

🗓️ 22 Apr 2022 20:44:23Reported by GitHub Advisory DatabaseType

YARP Denial of Service Vulnerability in input processing, update to YARP `1.0.1` or `1.1.0-rc.1.22211.2` in NuGet packages for patc

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 11
Prion	Denial of service	15 Apr 202219:15	–	prion
OSV	GHSA-8XC6-G8XW-H2C4 YARP Denial of Service Vulnerability	22 Apr 202220:23	–	osv
OSV	CVE-2022-26924	15 Apr 202219:15	–	osv
Vulnrichment	CVE-2022-26924 YARP Denial of Service Vulnerability	15 Apr 202219:06	–	vulnrichment
Veracode	Denial Of Service (DoS)	25 Apr 202204:22	–	veracode
Cvelist	CVE-2022-26924 YARP Denial of Service Vulnerability	15 Apr 202219:06	–	cvelist
NVD	CVE-2022-26924	15 Apr 202219:15	–	nvd
CVE	CVE-2022-26924	15 Apr 202219:15	–	cve
Microsoft CVE	YARP Denial of Service Vulnerability	12 Apr 202208:00	–	mscve
Kaspersky	KLA12505 Multiple vulnerabilities in Microsoft Developer Tools	12 Apr 202200:00	–	kaspersky

Vulners

Node

yarp.reverseproxy

yarp.reverseproxyRange<1.0.1

Source	Link
github	www.github.com/microsoft/reverse-proxy/security/advisories/GHSA-8xc6-g8xw-h2c4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-26924
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26924
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26924
github	www.github.com/microsoft/reverse-proxy/commit/11e6272da17beb03d0b44a19d3c4f1ffa52b7c38
github	www.github.com/advisories/GHSA-8xc6-g8xw-h2c4

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Apr 2022 20:23Current

4.6Medium risk

Vulners AI Score4.6

CVSS25

CVSS37.5

EPSS0.08986

SSVC