{"id":"CVE-2022-29117","aliases":["ALSA-2022:2199","ALSA-2022:2200","ALSA-2022:2202","BIT-dotnet-2022-29117","BIT-dotnet-sdk-2022-29117","EUVD-2022-6471","GHSA-3rq8-h3gj-r5c6","RHSA-2022:2194","RHSA-2022:2195","RHSA-2022:2196","RHSA-2022:2199","RHSA-2022:2200","RHSA-2022:2202","RHSA-2022:4588","RLSA-2022:2199","RLSA-2022:2200","RLSA-2022:2202"],"status":"published","title":".NET and Visual Studio Denial of Service Vulnerability","description":".NET and Visual Studio Denial of Service Vulnerability","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.05735,"percentile":0.93114,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-400"],"published":"2022-05-10T20:34:23Z","modified":"2026-10-29T11:01:07Z","exploits":[{"source":"pocgithub","id":"CharanMv08/cve-2022-29117-assessment","title":"CharanMv08/cve-2022-29117-assessment","date":"2026-08-31","url":"https://github.com/CharanMv08/cve-2022-29117-assessment"}],"fixes":[{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","fixed_in":["3.1.25","5.0.17","6.0.5"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","fixed_in":["3.1.25","5.0.17","6.0.5"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","fixed_in":["3.1.25","5.0.17","6.0.5"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","fixed_in":["3.1.25","5.0.17","6.0.5"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","fixed_in":["3.1.25","5.0.17","6.0.5"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","fixed_in":["3.1.25","5.0.17","6.0.5"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","fixed_in":["3.1.25","5.0.17","6.0.5"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","fixed_in":["3.1.25","5.0.17","6.0.5"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","fixed_in":["3.1.25","5.0.17","6.0.5"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","fixed_in":["3.1.25","5.0.17","6.0.5"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","fixed_in":["3.1.25","5.0.17","6.0.5"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.Owin.Security.Cookies","fixed_in":["4.2.2"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.Owin","fixed_in":["4.2.2"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-arm64","fixed_in":["6.0.5"],"sources":["ghsa","osv"]},{"ecosystem":"Bitnami","package":"dotnet","fixed_in":["5.0.1","6.0.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"dotnet-sdk","fixed_in":["5.0.1","6.0.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"last_affected":"3.1.24"},{"fixed":"3.1.25"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.0.16"},{"fixed":"5.0.17"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.4"},{"fixed":"6.0.5"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"last_affected":"3.1.24"},{"fixed":"3.1.25"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.0.16"},{"fixed":"5.0.17"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.4"},{"fixed":"6.0.5"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"last_affected":"3.1.24"},{"fixed":"3.1.25"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.0.16"},{"fixed":"5.0.17"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.4"},{"fixed":"6.0.5"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"last_affected":"3.1.24"},{"fixed":"3.1.25"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.0.16"},{"fixed":"5.0.17"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.4"},{"fixed":"6.0.5"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"last_affected":"3.1.24"},{"fixed":"3.1.25"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.0.16"},{"fixed":"5.0.17"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.4"},{"fixed":"6.0.5"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"last_affected":"3.1.24"},{"fixed":"3.1.25"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.0.16"},{"fixed":"5.0.17"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.4"},{"fixed":"6.0.5"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"last_affected":"3.1.24"},{"fixed":"3.1.25"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.0.16"},{"fixed":"5.0.17"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.4"},{"fixed":"6.0.5"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"last_affected":"3.1.24"},{"fixed":"3.1.25"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.0.16"},{"fixed":"5.0.17"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.4"},{"fixed":"6.0.5"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"last_affected":"3.1.24"},{"fixed":"3.1.25"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.0.16"},{"fixed":"5.0.17"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.4"},{"fixed":"6.0.5"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"last_affected":"3.1.24"},{"fixed":"3.1.25"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.0.16"},{"fixed":"5.0.17"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.4"},{"fixed":"6.0.5"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"last_affected":"3.1.24"},{"fixed":"3.1.25"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.0.16"},{"fixed":"5.0.17"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.4"},{"fixed":"6.0.5"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.Owin.Security.Cookies","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.2"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.Owin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.2"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.214-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-5.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.214-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-templates-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.214-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.419-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-3.1-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.419-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.419-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Bitnami","package":"dotnet","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.0.1"},{"introduced":"6.0.0"},{"fixed":"6.0.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"dotnet-sdk","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.0.1"},{"introduced":"6.0.0"},{"fixed":"6.0.1"}]}]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.25"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.Owin.Security.Cookies","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.2"}]}],"versions":["2.0.0","2.0.0-rc1","2.0.1","2.0.2","2.1.0","2.1.0-rc1","3.0.0","3.0.0-alpha1","3.0.0-beta1","3.0.0-rc1","3.0.0-rc2","3.0.1","3.1.0","3.1.0-rc1","4.0.0","4.0.0-alpha1","4.0.0-preview1","4.0.1","4.1.0","4.1.1","4.2.0","4.2.1"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.17"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.Owin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.2"}]}],"versions":["1.1.0-beta1","1.1.0-beta2","2.0.0","2.0.0-rc1","2.0.1","2.0.2","2.1.0","2.1.0-rc1","3.0.0","3.0.0-alpha1","3.0.0-beta1","3.0.0-rc1","3.0.0-rc2","3.0.1","3.1.0","3.1.0-rc1","4.0.0","4.0.0-alpha1","4.0.0-preview1","4.0.1","4.1.0","4.1.1","4.2.0","4.2.1"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.5"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.25"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.17"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.5"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.25"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.17"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.5"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.25"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.17"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.5"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.25"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.17"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.5"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.25"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.17"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.5"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.25"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.17"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.5"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.25"}]}],"versions":["3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.17"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.5"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.25"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.17"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.5"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.25"}]}],"versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.17"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.5"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.1.25"}]}]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"5.0.17"}]}],"versions":["5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.5"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.5"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4"]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-aspnetcore-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-aspnetcore-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-apphost-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-hostfxr-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-sdk-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-dotnet-templates-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:5.0::el7","package":"rh-dotnet50-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet5.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.17-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-5.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet5.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet5.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.25-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-3.1-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet3.1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.5-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dotnet6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.105-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dotnet5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.214-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dotnet3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.419-1.el8_6"}]}],"bundled":3}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"microsoft","product":".net"},{"vendor":"microsoft","product":".net 5.0"},{"vendor":"microsoft","product":".net 6.0"},{"vendor":"microsoft","product":".net core 3.1"},{"vendor":"microsoft","product":".net_core"},{"vendor":"microsoft","product":"microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)"},{"vendor":"microsoft","product":"microsoft visual studio 2019 version 16.9 (includes 16.0 - 16.8)"},{"vendor":"microsoft","product":"microsoft visual studio 2022 version 17.0"},{"vendor":"microsoft","product":"microsoft visual studio 2022 version 17.1"},{"vendor":"microsoft","product":"visual_studio_2019"},{"vendor":"microsoft","product":"visual_studio_2022"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29117","tags":["vendor-advisory","web"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29117","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5FPEQ6BTYRGTS6IYCDTZW6YF5HLQ3BY/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://github.com/dotnet/aspnetcore/security/advisories/GHSA-3rq8-h3gj-r5c6","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29117","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5FPEQ6BTYRGTS6IYCDTZW6YF5HLQ3BY","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W5FPEQ6BTYRGTS6IYCDTZW6YF5HLQ3BY","tags":["web"]},{"url":"https://github.com/advisories/GHSA-3rq8-h3gj-r5c6"},{"url":"https://errata.almalinux.org/8/ALSA-2022-2199.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2022-23267","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-29117","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2022-29145","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-2200.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-2202.html","tags":["advisory"]},{"url":"https://github.com/dotnet/aspnetcore","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2022:2194","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2083647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2083649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2083650","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2194.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23267","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23267","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23267","tags":["advisory"]},{"url":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-23267","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29117","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29117","tags":["advisory"]},{"url":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-29117","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29145","tags":["advisory"]},{"url":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-29145","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:2195","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2195.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:2196","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2196.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:2199","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2199.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:2200","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2200.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:2202","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2202.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:4588","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4588.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:2199","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:2200","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:2202","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-29117","title":".NET and Visual Studio Denial of Service Vulnerability","description":".NET and Visual Studio Denial of Service Vulnerability","status":"published","published":"2022-05-10T20:34:23Z","modified":"2026-05-27T13:51:43.788Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:36.270817Z"}],"euvd":[{"id":"EUVD-2022-6471","description":".NET and Visual Studio Denial of Service Vulnerability","status":"published","published":"2022-05-10T20:34:23Z","modified":"2026-05-27T13:51:43Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T18:21:04.78276Z"}],"ghsa":[{"id":"GHSA-3rq8-h3gj-r5c6","title":" .NET Denial of Service Vulnerability","description":"Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0 and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nA vulnerability exists in .NET 6.0, .NET 5.0 and .NET core 3.1 where a malicious client can manipulate cookies and cause a Denial of Service.\n\n### Affected software\n\n* Any .NET 6.0 application running on .NET 6.0.4 or earlier.\n* Any .NET 5.0 application running .NET 5.0.16 or earlier.\n* Any .NET Core 3.1 application running on .NET Core 3.1.24 or earlier.\n\n#### Affected packages\n\n**.NET Core 3.1**\n\n| Package name                                 | Affected versions | Patched versions |\n|---------------------------------------------------|-------------------|------------------|\n| Microsoft.Owin.Security.Cookies                   | \u003c4.2.2            | 4.2.2             |\n| Microsoft.Owin.Security                           | \u003c4.2.2            | 4.2.2             |\n| Microsoft.AspNetCore.App.Runtime.win-x64          | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-x64        | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.win-x86          | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.osx-x64          | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-x64   | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-arm64      | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-arm        | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.win-arm64        | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.win-arm          | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm   | \u003e=3.0.0,3.1.24    | 3.1.25           |\n\n**.NET 5.0**\n\n| Affected packages                                 | Affected versions | Patched versions |\n|---------------------------------------------------|-------------------|------------------|\n| Microsoft.Owin.Security.Cookies                   | \u003c 4.2.2            | 4.2.2             |\n| Microsoft.AspNetCore.App.Runtime.win-x64          | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-x64        | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.win-x86          | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.osx-x64          | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-x64   | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-arm64      | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-arm        | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.win-arm64        | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.win-arm          | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm   | \u003e=5.0.0,5.0.16    | 5.0.17           |\n\n**.NET 6.0**\n\n| Affected packages                                 | Affected versions | Patched versions |\n|---------------------------------------------------|-------------------|------------------|\n| Microsoft.Owin.Security.Cookies                   | \u003c4.2.2            | 4.2.2             |\n| Microsoft.AspNetCore.App.Runtime.win-x64          | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-x64        | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.win-x86          | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.osx-x64          | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-x64   | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-arm64      | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-arm        | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.win-arm64        | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.win-arm          | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.osx-arm64        | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm   | \u003e=6.0.0,6.0.4     | 6.0.5            |\n\n\n### Patches\n\n* If you're using .NET Core 6.0, you should download and install Runtime 6.0.5 or SDK 6.0.105 (for Visual Studio 2022 v17.0) or SDK 6.0.203 (for Visual Studio 2022 v17.1) from https://dotnet.microsoft.com/download/dotnet-core/6.0.\n\n* If you're using .NET 5.0, you should download and install Runtime 5.0.17 or SDK 5.0.214 (for Visual Studio 2019 v16.9) or SDK 5.0.408 (for Visual Studio 2011 v16.11) from https://dotnet.microsoft.com/download/dotnet-core/5.0.\n\n* If you're using .NET Core 3.1, you should download and install Runtime 3.1.25 or SDK 3.1.419 (for Visual Studio 2019 v16.9 or Visual Studio 2011 16.11 or Visual Studio 2022 17.0 or Visual Studio 2022 17.1 ) from https://dotnet.microsoft.com/download/dotnet-core/3.1.\n\n.NET 6.0, .NET 5.0 and .NET Core 3.1 updates are also available from Microsoft Update. To access this either type \"Check for updates\" in your Windows search, or open Settings, choose Update \u0026 Security and then click Check for Updates.\n\n#### Other Details\n\n- Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/220\n- An Issue for this can be found at https://github.com/dotnet/aspnetcore/issues/41608\n- MSRC details for this can be found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29117\n","status":"published","published":"2022-08-30T19:32:29Z","modified":"2025-01-02T21:56:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:38:26.167657Z"}],"nvd":[{"id":"CVE-2022-29117","description":".NET and Visual Studio Denial of Service Vulnerability","status":"published","published":"2022-05-10T21:15:11.877Z","modified":"2026-06-17T04:39:36.7Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:07:19.51203Z"}],"osv":[{"id":"CVE-2022-29117","description":".NET and Visual Studio Denial of Service Vulnerability","status":"published","published":"2022-05-10T21:15:11.877Z","modified":"2026-10-24T10:30:39.366137799Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:25.164673Z"},{"id":"GHSA-3rq8-h3gj-r5c6","title":" .NET Denial of Service Vulnerability","description":"Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0 and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nA vulnerability exists in .NET 6.0, .NET 5.0 and .NET core 3.1 where a malicious client can manipulate cookies and cause a Denial of Service.\n\n### Affected software\n\n* Any .NET 6.0 application running on .NET 6.0.4 or earlier.\n* Any .NET 5.0 application running .NET 5.0.16 or earlier.\n* Any .NET Core 3.1 application running on .NET Core 3.1.24 or earlier.\n\n#### Affected packages\n\n**.NET Core 3.1**\n\n| Package name                                 | Affected versions | Patched versions |\n|---------------------------------------------------|-------------------|------------------|\n| Microsoft.Owin.Security.Cookies                   | \u003c4.2.2            | 4.2.2             |\n| Microsoft.Owin.Security                           | \u003c4.2.2            | 4.2.2             |\n| Microsoft.AspNetCore.App.Runtime.win-x64          | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-x64        | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.win-x86          | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.osx-x64          | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-x64   | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-arm64      | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-arm        | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.win-arm64        | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.win-arm          | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | \u003e=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm   | \u003e=3.0.0,3.1.24    | 3.1.25           |\n\n**.NET 5.0**\n\n| Affected packages                                 | Affected versions | Patched versions |\n|---------------------------------------------------|-------------------|------------------|\n| Microsoft.Owin.Security.Cookies                   | \u003c 4.2.2            | 4.2.2             |\n| Microsoft.AspNetCore.App.Runtime.win-x64          | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-x64        | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.win-x86          | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.osx-x64          | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-x64   | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-arm64      | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-arm        | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.win-arm64        | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.win-arm          | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | \u003e=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm   | \u003e=5.0.0,5.0.16    | 5.0.17           |\n\n**.NET 6.0**\n\n| Affected packages                                 | Affected versions | Patched versions |\n|---------------------------------------------------|-------------------|------------------|\n| Microsoft.Owin.Security.Cookies                   | \u003c4.2.2            | 4.2.2             |\n| Microsoft.AspNetCore.App.Runtime.win-x64          | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-x64        | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.win-x86          | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.osx-x64          | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-x64   | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-arm64      | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-arm        | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.win-arm64        | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.win-arm          | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.osx-arm64        | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | \u003e=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm   | \u003e=6.0.0,6.0.4     | 6.0.5            |\n\n\n### Patches\n\n* If you're using .NET Core 6.0, you should download and install Runtime 6.0.5 or SDK 6.0.105 (for Visual Studio 2022 v17.0) or SDK 6.0.203 (for Visual Studio 2022 v17.1) from https://dotnet.microsoft.com/download/dotnet-core/6.0.\n\n* If you're using .NET 5.0, you should download and install Runtime 5.0.17 or SDK 5.0.214 (for Visual Studio 2019 v16.9) or SDK 5.0.408 (for Visual Studio 2011 v16.11) from https://dotnet.microsoft.com/download/dotnet-core/5.0.\n\n* If you're using .NET Core 3.1, you should download and install Runtime 3.1.25 or SDK 3.1.419 (for Visual Studio 2019 v16.9 or Visual Studio 2011 16.11 or Visual Studio 2022 17.0 or Visual Studio 2022 17.1 ) from https://dotnet.microsoft.com/download/dotnet-core/3.1.\n\n.NET 6.0, .NET 5.0 and .NET Core 3.1 updates are also available from Microsoft Update. To access this either type \"Check for updates\" in your Windows search, or open Settings, choose Update \u0026 Security and then click Check for Updates.\n\n#### Other Details\n\n- Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/220\n- An Issue for this can be found at https://github.com/dotnet/aspnetcore/issues/41608\n- MSRC details for this can be found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29117\n","status":"published","published":"2022-08-30T19:32:29Z","modified":"2025-01-02T22:01:04.100154Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:36.092962Z"},{"id":"RHSA-2022:2194","title":"Red Hat Security Advisory: .NET Core 3.1 on RHEL 7 security and bugfix update","status":"published","published":"2024-09-16T08:06:33Z","modified":"2026-02-26T10:04:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:2195","title":"Red Hat Security Advisory: .NET 6.0 on RHEL 7 security and bugfix update","status":"published","published":"2024-09-16T08:06:55Z","modified":"2026-02-26T10:04:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:2196","title":"Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update","status":"published","published":"2024-09-16T08:06:48Z","modified":"2026-02-26T10:04:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:2199","title":"Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:07:02Z","modified":"2026-06-26T12:21:17.618420111Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:2200","title":"Red Hat Security Advisory: .NET 5.0 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:07:09Z","modified":"2026-06-26T12:21:17.988798364Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:2202","title":"Red Hat Security Advisory: .NET Core 3.1 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:06:40Z","modified":"2026-06-26T12:21:17.588045614Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:4588","title":"Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:07:18Z","modified":"2026-06-26T12:21:17.976380445Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RLSA-2022:2199","title":"Important: .NET 6.0 security, bug fix, and enhancement update","description":".NET Core is a managed-software framework. It implements a subset of the .NET\nframework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 6.0.105 and .NET Core Runtime 6.0.5.\n\nSecurity Fix(es):\n\n* dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)\n\n* dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)\n\n* dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-05-11T13:20:34Z","modified":"2026-02-04T22:15:08.22857Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:2200","title":"Important: .NET 5.0 security, bug fix, and enhancement update","description":".NET Core is a managed-software framework. It implements a subset of the .NET\nframework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 5.0.214 and .NET Core Runtime 5.0.17.\n\nSecurity Fix(es):\n\n* dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)\n\n* dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)\n\n* dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-05-11T13:22:02Z","modified":"2026-02-04T15:00:05.033587Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:2202","title":"Important: .NET Core 3.1 security, bug fix, and enhancement update","description":".NET Core is a managed-software framework. It implements a subset of the .NET\nframework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 3.1.419 and .NET Core Runtime 3.1.25.\n\nSecurity Fix(es):\n\n* dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)\n\n* dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)\n\n* dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-05-11T13:24:22Z","modified":"2026-02-05T13:15:14.70486Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"ALSA-2022:2199","title":"Important: .NET 6.0 security, bug fix, and enhancement update","description":".NET Core is a managed-software framework. It implements a subset of the .NET\nframework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 6.0.105 and .NET Core Runtime 6.0.5.\n\nSecurity Fix(es):\n\n* dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)\n\n* dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)\n\n* dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-05-11T13:20:34Z","modified":"2026-10-29T11:01:04.547615174Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2022:2200","title":"Important: .NET 5.0 security, bug fix, and enhancement update","description":".NET Core is a managed-software framework. It implements a subset of the .NET\nframework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 5.0.214 and .NET Core Runtime 5.0.17.\n\nSecurity Fix(es):\n\n* dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)\n\n* dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)\n\n* dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-05-11T13:22:02Z","modified":"2026-10-29T11:01:06.056113875Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2022:2202","title":"Important: .NET Core 3.1 security, bug fix, and enhancement update","description":".NET Core is a managed-software framework. It implements a subset of the .NET\nframework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET Core that address a security vulnerability are now available. The updated versions are .NET Core SDK 3.1.419 and .NET Core Runtime 3.1.25.\n\nSecurity Fix(es):\n\n* dotnet: excess memory allocation via HttpClient causes DoS (CVE-2022-23267)\n\n* dotnet: malicious content causes high CPU and memory usage (CVE-2022-29117)\n\n* dotnet: parsing HTML causes Denial of Service (CVE-2022-29145)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-05-11T13:24:22Z","modified":"2026-10-29T11:01:07.400446091Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BIT-dotnet-2022-29117","title":".NET and Visual Studio Denial of Service Vulnerability","description":".NET and Visual Studio Denial of Service Vulnerability","status":"published","published":"2024-03-06T10:58:11.981Z","modified":"2026-09-08T08:46:46.279547345Z","updated_at":"2026-11-02T15:28:29.152062Z"},{"id":"BIT-dotnet-sdk-2022-29117","title":".NET and Visual Studio Denial of Service Vulnerability","description":".NET and Visual Studio Denial of Service Vulnerability","status":"published","published":"2024-03-06T10:58:18.699Z","modified":"2026-09-08T08:46:38.881113594Z","updated_at":"2026-11-02T15:28:29.152062Z"}]}}