{"id":"CVE-2021-34485","aliases":["BIT-dotnet-2021-34485","BIT-dotnet-sdk-2021-34485","EUVD-2022-7165","GHSA-vgwq-hfqc-58wv","RHSA-2021:3142","RHSA-2021:3143","RHSA-2021:3144","RHSA-2021:3145","RHSA-2021:3147","RHSA-2021:3148"],"status":"published","title":".NET Core and Visual Studio Information Disclosure Vulnerability","description":".NET Core and Visual Studio Information Disclosure Vulnerability","severity":{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.02066,"percentile":0.81637,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2021-08-12T18:11:57Z","modified":"2026-10-24T10:30:42Z","fixes":[{"ecosystem":"NuGet","package":"Microsoft.NETCore.App","fixed_in":["2.1.29"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-x64","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.rhel.6-x64","fixed_in":["3.1.18"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","fixed_in":["3.1.18","5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-x64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.osx-x64","fixed_in":["5.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"Bitnami","package":"dotnet","fixed_in":["5.0.9"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"dotnet-sdk","fixed_in":["5.0.9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21","fixed_in":["0:2.1-28.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21-dotnet","fixed_in":["0:2.1.525-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21-dotnet-debuginfo","fixed_in":["0:2.1.525-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21-dotnet-host","fixed_in":["0:2.1.29-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21-dotnet-runtime-2.1","fixed_in":["0:2.1.29-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21-dotnet-sdk-2.1","fixed_in":["0:2.1.525-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21-dotnet-sdk-2.1.5xx","fixed_in":["0:2.1.525-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21-runtime","fixed_in":["0:2.1-28.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet","fixed_in":["0:2.1.525-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-debuginfo","fixed_in":["0:2.1.525-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-debugsource","fixed_in":["0:2.1.525-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host-fxr-2.1","fixed_in":["0:2.1.29-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host-fxr-2.1-debuginfo","fixed_in":["0:2.1.29-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-2.1","fixed_in":["0:2.1.29-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-2.1-debuginfo","fixed_in":["0:2.1.29-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-2.1","fixed_in":["0:2.1.525-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-2.1.5xx","fixed_in":["0:2.1.525-1.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-2.1.5xx-debuginfo","fixed_in":["0:2.1.525-1.el8_4"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.1.29"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.rhel.6-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"dotnet","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"dotnet-sdk","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.1.29"}]}],"versions":["2.1.0","2.1.1","2.1.10","2.1.11","2.1.12","2.1.13","2.1.14","2.1.15","2.1.16","2.1.17","2.1.18","2.1.19","2.1.2","2.1.20","2.1.21","2.1.22","2.1.23","2.1.24","2.1.25","2.1.26","2.1.27","2.1.28","2.1.3","2.1.4","2.1.5","2.1.6","2.1.7","2.1.8","2.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.rhel.6-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.18"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.2","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.Mono.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.NETCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.18-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.118-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1-28.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.525-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.525-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.29-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21-dotnet-runtime-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.29-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21-dotnet-sdk-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.525-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21-dotnet-sdk-2.1.5xx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.525-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:2.1::el7","package":"rh-dotnet21-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1-28.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.525-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.525-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.525-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host-fxr-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.29-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host-fxr-2.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.29-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.29-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-2.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.29-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.525-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-2.1.5xx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.525-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-2.1.5xx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.525-1.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-aspnetcore-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-aspnetcore-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-apphost-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-hostfxr-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-sdk-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-templates-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.9-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet5.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.206-1.el8_4"}]}],"bundled":3}],"products":[{"vendor":"microsoft","product":".net"},{"vendor":"microsoft","product":".net 5.0"},{"vendor":"microsoft","product":".net core 2.1"},{"vendor":"microsoft","product":".net core 3.1"},{"vendor":"microsoft","product":".net_core"},{"vendor":"microsoft","product":"microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)"},{"vendor":"microsoft","product":"microsoft visual studio 2019 version 16.10 (includes 16.0 - 16.9)"},{"vendor":"microsoft","product":"microsoft visual studio 2019 version 16.4 (includes 16.0 - 16.3)"},{"vendor":"microsoft","product":"microsoft visual studio 2019 version 16.7 (includes 16.0 – 16.6)"},{"vendor":"microsoft","product":"microsoft visual studio 2019 version 16.9 (includes 16.0 - 16.8)"},{"vendor":"microsoft","product":"powershell 7.0"},{"vendor":"microsoft","product":"powershell 7.1"},{"vendor":"microsoft","product":"powershell_core"},{"vendor":"microsoft","product":"visual_studio_2017"},{"vendor":"microsoft","product":"visual_studio_2019"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34485","tags":["vendor-advisory","patch","web","article"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34485","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory","fix","web"]},{"url":"https://github.com/dotnet/runtime/security/advisories/GHSA-vgwq-hfqc-58wv","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34485","tags":["web","advisory"]},{"url":"https://github.com/dotnet/announcements/issues/196","tags":["web","article"]},{"url":"https://github.com/github/advisory-database/issues/741","tags":["web"]},{"url":"https://github.com/advisories/GHSA-vgwq-hfqc-58wv"},{"url":"https://access.redhat.com/errata/RHSA-2021:3142","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990300","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3142.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-26423","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-26423","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26423","tags":["advisory"]},{"url":"https://github.com/dotnet/announcements/issues/194","tags":["article"]},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26423","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-34485","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-34485","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-34532","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-34532","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34532","tags":["advisory"]},{"url":"https://github.com/dotnet/announcements/issues/195","tags":["article"]},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34532","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3143","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3143.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3144","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3144.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3145","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3145.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3147","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3147.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3148","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3148.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-34485","title":".NET Core and Visual Studio Information Disclosure Vulnerability","description":".NET Core and Visual Studio Information Disclosure Vulnerability","status":"published","published":"2021-08-12T18:11:57Z","modified":"2026-10-07T16:10:01.671Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","level":"medium","assessor":"cna"},{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:33:11.244759Z"}],"euvd":[{"id":"EUVD-2022-7165","description":".NET Core and Visual Studio Information Disclosure Vulnerability","status":"published","published":"2021-08-12T18:11:57Z","modified":"2026-10-07T16:10:01Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","level":"medium"}],"updated_at":"2026-11-02T17:27:35.164729Z"}],"ghsa":[{"id":"GHSA-vgwq-hfqc-58wv","title":".NET Core Information Disclosure Vulnerability","description":"Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0, .NET Core 3.1 and .NET Core 2.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nAn information disclosure vulnerability exists in .NET 5.0, .NET Core 3.1 and .NET Core 2.1 when dumps created by the tool to collect crash dumps and dumps on demand are created with global read permissions on Linux and macOS.\n\n### Patches\n\n* If you're using .NET 5.0, you should download and install Runtime 5.0.9 or SDK 5.0.206 (for Visual Studio 2019 v16.8) or SDK 5.0.303 (for Visual Studio 2019 V16.10) from https://dotnet.microsoft.com/download/dotnet-core/5.0.\n\n* If you're using .NET Core 3.1, you should download and install Runtime 3.1.18 or SDK 3.1.118 (for Visual Studio 2019 v16.4) or 3.1.412 (for Visual Studio 2019 v16.7 or later) from https://dotnet.microsoft.com/download/dotnet-core/3.1.\n\n* If you're using .NET Core 2.1, you should download and install Runtime 2.1.29 or SDK 2.1.525 (for Visual Studio 2019 v15.9) or 2.1.817 from https://dotnet.microsoft.com/download/dotnet-core/2.1.\n\n\n#### Other Details\n\n- Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/196\n- An Issue for this can be found at https://github.com/dotnet/runtime/issues/57174\n- MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34485\n","status":"published","published":"2022-10-20T21:34:09Z","modified":"2023-02-03T05:00:49Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:36:41.247728Z"}],"nvd":[{"id":"CVE-2021-34485","description":".NET Core and Visual Studio Information Disclosure Vulnerability","status":"published","published":"2021-08-12T18:15:09.157Z","modified":"2026-10-07T17:16:42.997Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:06:56.943671Z"}],"osv":[{"id":"CVE-2021-34485","description":".NET Core and Visual Studio Information Disclosure Vulnerability","status":"published","published":"2021-08-12T18:15:09.157Z","modified":"2026-10-24T10:30:42.39719958Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:20.13324Z"},{"id":"GHSA-vgwq-hfqc-58wv","title":".NET Core Information Disclosure Vulnerability","description":"Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0, .NET Core 3.1 and .NET Core 2.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nAn information disclosure vulnerability exists in .NET 5.0, .NET Core 3.1 and .NET Core 2.1 when dumps created by the tool to collect crash dumps and dumps on demand are created with global read permissions on Linux and macOS.\n\n### Patches\n\n* If you're using .NET 5.0, you should download and install Runtime 5.0.9 or SDK 5.0.206 (for Visual Studio 2019 v16.8) or SDK 5.0.303 (for Visual Studio 2019 V16.10) from https://dotnet.microsoft.com/download/dotnet-core/5.0.\n\n* If you're using .NET Core 3.1, you should download and install Runtime 3.1.18 or SDK 3.1.118 (for Visual Studio 2019 v16.4) or 3.1.412 (for Visual Studio 2019 v16.7 or later) from https://dotnet.microsoft.com/download/dotnet-core/3.1.\n\n* If you're using .NET Core 2.1, you should download and install Runtime 2.1.29 or SDK 2.1.525 (for Visual Studio 2019 v15.9) or 2.1.817 from https://dotnet.microsoft.com/download/dotnet-core/2.1.\n\n\n#### Other Details\n\n- Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/196\n- An Issue for this can be found at https://github.com/dotnet/runtime/issues/57174\n- MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34485\n","status":"published","published":"2022-10-20T21:34:09Z","modified":"2024-12-06T05:38:33.518809Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:46:57.348035Z"},{"id":"RHSA-2021:3142","title":"Red Hat Security Advisory: .NET Core 3.1 security and bugfix update","status":"published","published":"2024-09-16T06:15:23Z","modified":"2026-10-08T10:02:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3143","title":"Red Hat Security Advisory: .NET Core 3.1 on RHEL 7 security and bugfix update","status":"published","published":"2024-09-16T06:15:16Z","modified":"2026-10-08T10:02:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3144","title":"Red Hat Security Advisory: .NET Core 2.1 on Red Hat Enterprise Linux security and bugfix update","status":"published","published":"2024-09-13T20:28:35Z","modified":"2026-10-08T10:02:32Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3145","title":"Red Hat Security Advisory: .NET Core 2.1 security and bugfix update","status":"published","published":"2024-09-13T20:28:46Z","modified":"2026-10-08T10:02:33Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3147","title":"Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update","status":"published","published":"2024-09-16T06:15:29Z","modified":"2026-10-08T10:02:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3148","title":"Red Hat Security Advisory: .NET 5.0 security and bugfix update","status":"published","published":"2024-09-16T06:15:36Z","modified":"2026-10-08T10:02:34Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"BIT-dotnet-2021-34485","title":".NET Core and Visual Studio Information Disclosure Vulnerability","description":".NET Core and Visual Studio Information Disclosure Vulnerability","status":"published","published":"2024-03-06T10:59:18.39Z","modified":"2026-10-08T09:15:02.750918656Z","updated_at":"2026-11-02T15:28:29.152062Z"},{"id":"BIT-dotnet-sdk-2021-34485","title":".NET Core and Visual Studio Information Disclosure Vulnerability","description":".NET Core and Visual Studio Information Disclosure Vulnerability","status":"published","published":"2024-03-06T10:59:26.926Z","modified":"2026-10-08T09:15:02.811226982Z","updated_at":"2026-11-02T15:28:29.152062Z"}]}}