Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the HTTP/1 connection...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the HTTP/1 connection...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the HTTP/1 connection...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the HTTP/1 connection handli...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the HTTP/1 connection handli...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the HTTP/1 connection...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the HTTP/1 connection...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the HTTP/1 connecti...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling via the HTTP/1 connection handling process. An attacker can gain unauthorized access to sensitive information or perform actions with elevated privileges by exploiting the ability to reparse unread request-body...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.win-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the HTTP/1 connection handli...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.win-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the HTTP/1 connection...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.win-x86 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling via the HTTP/1 connection handli...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/2 request...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/2 request...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/2 request...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/2 request processi...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/2 request...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.win-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/2 request processi...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/2 request processing...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/2 request processing when newline characters in request trailers and values from the dynamic HPACK table are accepted instead of being treated as malformed. An attacker can bypass security controls and...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.linux-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/2 request processi...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.win-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/2 request processing...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/2 request processing...

HTTP Request Smuggling

Overview Microsoft.AspNetCore.App.Runtime.win-x86 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/2 request processing...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.win-x86 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling vi...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.win-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling vi...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the request-localization process. An attacker can cause unbounded memory growth and disrupt service availability by sending unauthenticated requests with synthetic culture names...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling vi...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.win-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling vi...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or...