3967 matches found
Important: dotnet8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.107 and Runtime 8.0.7. Security...
Important: dotnet8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.107 and Runtime 8.0.7. Security...
GHSA-447R-WPH3-92PM vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap, dotnet...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...
GHSA-447R-WPH3-92PM vulnerabilities
Vulnerabilities for packages: dotnet, dotnet-bootstrap...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...
GHSA-HH2W-P6RV-4G7W vulnerabilities
Vulnerabilities for packages: dotnet...
GHSA-HH2W-P6RV-4G7W vulnerabilities
Vulnerabilities for packages: dotnet...
CVE-2024-38095 vulnerabilities
Vulnerabilities for packages: dotnet, dotnet-bootstrap...
CVE-2024-38095 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap, dotnet...
CVE-2024-35264
.NET and Visual Studio Remote Code Execution Vulnerability...
CVE-2024-30105 vulnerabilities
Vulnerabilities for packages: dotnet...
CVE-2024-30105 vulnerabilities
Vulnerabilities for packages: dotnet...
PT-2024-4734 · Microsoft +8 · Visual Studio +10
Name of the Vulnerable Software and Affected Versions: .NET Core versions prior to 8.x Visual Studio versions prior to 8.x Description: The issue is related to an uncontrolled resource consumption in the JsonSerializer.DeserializeAsyncEnumerable method of the System.Text.Json library in Microsoft...
