{"id":"CVE-2022-34716","aliases":["ALPINE-CVE-2022-34716","ALSA-2022:6043","ALSA-2022:6057","ALSA-2022:6058","BIT-dotnet-2022-34716","BIT-dotnet-sdk-2022-34716","BIT-powershell-2022-34716","EUVD-2024-0733","GHSA-vh55-786g-wjwj","RHSA-2022:6037","RHSA-2022:6038","RHSA-2022:6043","RHSA-2022:6057","RHSA-2022:6058","RLSA-2022:6057","RLSA-2022:6058"],"status":"published","title":".NET Spoofing Vulnerability","description":".NET Spoofing Vulnerability","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02518,"percentile":0.8495,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-290"],"published":"2022-08-09T19:55:43Z","modified":"2026-11-03T07:31:26Z","fixes":[{"ecosystem":"NuGet","package":"System.Security.Cryptography.Xml","fixed_in":["4.7.1","6.0.1"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","fixed_in":["3.1.28","6.0.8"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","fixed_in":["3.1.28","6.0.8"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","fixed_in":["3.1.28","6.0.8"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","fixed_in":["3.1.28","6.0.8"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","fixed_in":["3.1.28","6.0.8"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","fixed_in":["3.1.28","6.0.8"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","fixed_in":["3.1.28","6.0.8"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","fixed_in":["3.1.28","6.0.8"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","fixed_in":["3.1.28","6.0.8"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-arm64","fixed_in":["6.0.8"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","fixed_in":["3.1.28","6.0.8"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","fixed_in":["3.1.28","6.0.8"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.16","package":"dotnet6-build","fixed_in":["6.0.108-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"dotnet6-build","fixed_in":["6.0.108-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"dotnet6-build","fixed_in":["6.0.108-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"dotnet6-build","fixed_in":["6.0.108-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"dotnet6-build","fixed_in":["6.0.108-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"dotnet6-runtime","fixed_in":["6.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"dotnet6-runtime","fixed_in":["6.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"dotnet6-runtime","fixed_in":["6.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"dotnet6-runtime","fixed_in":["6.0.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"dotnet6-runtime","fixed_in":["6.0.8-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"aspnetcore-runtime-6.0","fixed_in":["6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"aspnetcore-targeting-pack-6.0","fixed_in":["6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-apphost-pack-6.0","fixed_in":["6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-host","fixed_in":["6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-hostfxr-6.0","fixed_in":["6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-runtime-6.0","fixed_in":["6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-sdk-6.0","fixed_in":["6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-sdk-6.0-source-built-artifacts","fixed_in":["6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-targeting-pack-6.0","fixed_in":["6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-templates-6.0","fixed_in":["6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"netstandard-targeting-pack-2.1","fixed_in":["6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-3.1","fixed_in":["3.1.28-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-3.1","fixed_in":["3.1.28-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-3.1","fixed_in":["3.1.28-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-3.1","fixed_in":["3.1.28-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-runtime-3.1","fixed_in":["3.1.28-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-3.1","fixed_in":["3.1.422-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-3.1-source-built-artifacts","fixed_in":["3.1.422-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-3.1","fixed_in":["3.1.28-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-templates-3.1","fixed_in":["3.1.422-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-6.0","fixed_in":["6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-6.0","fixed_in":["6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet","fixed_in":["6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-6.0","fixed_in":["6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-host","fixed_in":["6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-6.0","fixed_in":["6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-runtime-6.0","fixed_in":["6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-6.0","fixed_in":["6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-6.0-source-built-artifacts","fixed_in":["6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-6.0","fixed_in":["6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-templates-6.0","fixed_in":["6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"netstandard-targeting-pack-2.1","fixed_in":["6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"dotnet","fixed_in":["6.0.8"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"dotnet-sdk","fixed_in":["6.0.8"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"powershell","fixed_in":["7.0.12","7.2.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-aspnetcore-runtime-6.0","fixed_in":["0:6.0.8-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-aspnetcore-targeting-pack-6.0","fixed_in":["0:6.0.8-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet","fixed_in":["0:6.0.108-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-apphost-pack-6.0","fixed_in":["0:6.0.8-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-debuginfo","fixed_in":["0:6.0.108-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-host","fixed_in":["0:6.0.8-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-hostfxr-6.0","fixed_in":["0:6.0.8-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-runtime-6.0","fixed_in":["0:6.0.8-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-sdk-6.0","fixed_in":["0:6.0.108-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts","fixed_in":["0:6.0.108-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-targeting-pack-6.0","fixed_in":["0:6.0.8-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-templates-6.0","fixed_in":["0:6.0.108-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-netstandard-targeting-pack-2.1","fixed_in":["0:6.0.108-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"aspnetcore-runtime-6.0","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"aspnetcore-targeting-pack-6.0","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-apphost-pack-6.0","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-apphost-pack-6.0-debuginfo","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-host","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-host-debuginfo","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-hostfxr-6.0","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-hostfxr-6.0-debuginfo","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-runtime-6.0","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-runtime-6.0-debuginfo","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-sdk-6.0","fixed_in":["0:6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-sdk-6.0-debuginfo","fixed_in":["0:6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-targeting-pack-6.0","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-templates-6.0","fixed_in":["0:6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0","fixed_in":["0:6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0-debuginfo","fixed_in":["0:6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0-debugsource","fixed_in":["0:6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"netstandard-targeting-pack-2.1","fixed_in":["0:6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-apphost-pack-6.0-debuginfo","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-host-debuginfo","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-hostfxr-6.0-debuginfo","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-runtime-6.0-debuginfo","fixed_in":["0:6.0.8-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-sdk-6.0-debuginfo","fixed_in":["0:6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-sdk-6.0-source-built-artifacts","fixed_in":["0:6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet6.0-debuginfo","fixed_in":["0:6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet6.0-debugsource","fixed_in":["0:6.0.108-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-6.0","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-6.0","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet","fixed_in":["0:6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-6.0","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-6.0-debuginfo","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host-debuginfo","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-6.0","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-6.0-debuginfo","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-6.0","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-6.0-debuginfo","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-6.0","fixed_in":["0:6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-6.0-debuginfo","fixed_in":["0:6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-6.0","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-6.0","fixed_in":["0:6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0","fixed_in":["0:6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0-debuginfo","fixed_in":["0:6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0-debugsource","fixed_in":["0:6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netstandard-targeting-pack-2.1","fixed_in":["0:6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-6.0-debuginfo","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-host-debuginfo","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-6.0-debuginfo","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-6.0-debuginfo","fixed_in":["0:6.0.8-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-6.0-debuginfo","fixed_in":["0:6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-6.0-source-built-artifacts","fixed_in":["0:6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet6.0-debuginfo","fixed_in":["0:6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet6.0-debugsource","fixed_in":["0:6.0.108-1.el8_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"dotnet6.0","fixed_in":["0:6.0.108-1.el8_6"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"NuGet","package":"System.Security.Cryptography.Xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.7.0"},{"fixed":"4.7.1"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"System.Security.Cryptography.Xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"6.0.0"},{"fixed":"6.0.1"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"last_affected":"3.1.27"},{"fixed":"3.1.28"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.7"},{"fixed":"6.0.8"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"last_affected":"3.1.27"},{"fixed":"3.1.28"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.7"},{"fixed":"6.0.8"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"last_affected":"3.1.27"},{"fixed":"3.1.28"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.7"},{"fixed":"6.0.8"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"last_affected":"3.1.27"},{"fixed":"3.1.28"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.7"},{"fixed":"6.0.8"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"last_affected":"3.1.27"},{"fixed":"3.1.28"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.7"},{"fixed":"6.0.8"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"last_affected":"3.1.27"},{"fixed":"3.1.28"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.7"},{"fixed":"6.0.8"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"last_affected":"3.1.27"},{"fixed":"3.1.28"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.7"},{"fixed":"6.0.8"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"last_affected":"3.1.27"},{"fixed":"3.1.28"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.7"},{"fixed":"6.0.8"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"last_affected":"3.1.27"},{"fixed":"3.1.28"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.7"},{"fixed":"6.0.8"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.7"},{"fixed":"6.0.8"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"last_affected":"3.1.27"},{"fixed":"3.1.28"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.7"},{"fixed":"6.0.8"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"last_affected":"3.1.27"},{"fixed":"3.1.28"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.7"},{"fixed":"6.0.8"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"dotnet6-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.108-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"dotnet6-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.108-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"dotnet6-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.108-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"dotnet6-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.108-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"dotnet6-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.108-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"dotnet6-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"dotnet6-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"dotnet6-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"dotnet6-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"dotnet6-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.28-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.28-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.28-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.28-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.28-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.422-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-3.1-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.422-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.28-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.422-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"dotnet","ranges":[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.0.8"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"dotnet-sdk","ranges":[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.0.8"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"powershell","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.0.12"},{"introduced":"7.2.0"},{"fixed":"7.2.6"}]}]},{"source":"osv","ecosystem":"NuGet","package":"System.Security.Cryptography.Xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.1"}]}],"versions":["4.4.0","4.4.0-preview1-25305-02","4.4.0-preview2-25405-01","4.4.1","4.4.2","4.5.0","4.5.0-preview1-25914-04","4.5.0-preview1-26216-02","4.5.0-preview2-26406-04","4.5.0-rc1","4.6.0","4.7.0"]},{"source":"osv","ecosystem":"NuGet","package":"System.Security.Cryptography.Xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.1"}]}],"versions":["5.0.0","6.0.0"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.28"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.8"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.28"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.8"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.28"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.8"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.28"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.8"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.28"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.8"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.28"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.8"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.28"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.8"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.28"}]}],"versions":["3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.8"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.28"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.8"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.8"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.28"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.8"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.28"}]}]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.8"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.28-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-3.1-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet3.1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.8-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el8_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dotnet3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.422-1.el8_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dotnet6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.108-1.el8_6"}]}]}],"products":[{"vendor":"microsoft","product":".net"},{"vendor":"microsoft","product":".net 6.0"},{"vendor":"microsoft","product":".net core 3.1"},{"vendor":"microsoft","product":".net_core"},{"vendor":"microsoft","product":"microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8)"},{"vendor":"microsoft","product":"microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)"},{"vendor":"microsoft","product":"microsoft visual studio 2019 version 16.9 (includes 16.0 - 16.8)"},{"vendor":"microsoft","product":"microsoft visual studio 2022 version 17.0"},{"vendor":"microsoft","product":"microsoft visual studio 2022 version 17.2"},{"vendor":"microsoft","product":"powershell"},{"vendor":"microsoft","product":"powershell 7.0"},{"vendor":"microsoft","product":"powershell 7.2"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34716","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://github.com/dotnet/aspnetcore/security/advisories/GHSA-vh55-786g-wjwj","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34716","tags":["web","advisory"]},{"url":"https://github.com/dotnet/announcements/issues/232","tags":["web","article"]},{"url":"https://github.com/dotnet/aspnetcore/issues/43166","tags":["web"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-34716","tags":["web"]},{"url":"https://github.com/advisories/GHSA-vh55-786g-wjwj"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-34716","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6043","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-34716","tags":["report"]},{"url":"https://bugzilla.redhat.com/2115183","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-6043.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6057","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-6057.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6058","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-6058.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6037","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2115183","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6037.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2085307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1650","tags":["advisory"]},{"url":"https://huntr.dev/bounties/dc9e467f-be5d-4945-867d-1044d27e9b8e","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-34716","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6038","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6038.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6043.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6057.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6058.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:6057","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:6058","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-34716","title":".NET Spoofing Vulnerability","description":".NET Spoofing Vulnerability","status":"published","published":"2022-08-09T19:55:43Z","modified":"2025-05-29T20:07:34.145Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","level":"medium","assessor":"cna"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:34:42.354707Z"}],"euvd":[{"id":"EUVD-2024-0733","description":".NET Spoofing Vulnerability","status":"published","published":"2022-08-09T19:55:43Z","modified":"2025-05-29T20:07:34Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","level":"medium"}],"updated_at":"2026-11-02T20:32:34.937389Z"}],"ghsa":[{"id":"GHSA-vh55-786g-wjwj","title":".NET Information Disclosure Vulnerability","description":"Microsoft is releasing this security advisory to provide information about a vulnerability in .NET Core 3.1 and .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nAn information disclosure vulnerability exists in .NET Core 3.1 and .NET 6.0 that could lead to unauthorized access of privileged information.\n\n## \u003ca name=\"affected-software\"\u003e\u003c/a\u003eAffected software\n\n* Any .NET 6.0 application running on .NET 6.0.7 or earlier.\n* Any .NET Core 3.1 applicaiton running on .NET Core 3.1.27 or earlier.\n\nIf your application uses the following package versions, ensure you update to the latest version of .NET.\n\n### \u003ca name=\".NET Core 3.1\"\u003e\u003c/a\u003e.NET Core 3.1\n\nPackage name | Affected version | Patched version\n------------ | ---------------- | -------------------------\n[System.Security.Cryptography.Xml](http://system.security)| \u003c=4.7.0| 4.7.1\n[Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm)| \u003e=3.1.0, 3.1.27| 3.1.28\n\n### \u003ca name=\".NET 6\"\u003e\u003c/a\u003e.NET 6\n\nPackage name | Affected version | Patched version\n------------ | ---------------- | -------------------------\n[System.Security.Cryptography.Xml](https://www.nuget.org/packages/System.Security.Cryptography.Xml)| \u003e=5.0.0, 6.0.0| 6.0.1\n[Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.osx-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-arm64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm)| \u003e=6.0.0, 6.0.7| 6.0.8\n\n## Patches\n\n\n* If you're using .NET 6.0, you should download and install Runtime 6.0.8 or SDK 6.0.108 (for Visual Studio 2022 v17.1) from https://dotnet.microsoft.com/download/dotnet-core/6.0.\n* If you're using .NET Core 3.1, you should download and install Runtime 3.1.28 (for Visual Studio 2019 v16.9) from https://dotnet.microsoft.com/download/dotnet-core/3.1.\n\n\n### Other\n\nAnnouncement for this issue can be found at https://github.com/dotnet/announcements/issues/232\nAn Issue for this can be found at https://github.com/dotnet/aspnetcore/issues/43166\nMSRC details for this can be found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34716","status":"published","published":"2024-02-03T00:47:54Z","modified":"2024-04-02T19:01:31Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:37:42.744468Z"}],"nvd":[{"id":"CVE-2022-34716","description":".NET Spoofing Vulnerability","status":"published","published":"2022-08-09T20:15:11.66Z","modified":"2026-06-17T04:50:47Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:07:24.750124Z"}],"osv":[{"id":"ALPINE-CVE-2022-34716","description":".NET Spoofing Vulnerability","status":"published","published":"2022-08-09T20:15:11.66Z","modified":"2026-11-03T07:31:26.01151896Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"CVE-2022-34716","description":".NET Spoofing Vulnerability","status":"published","published":"2022-08-09T20:15:11.66Z","modified":"2026-10-24T10:30:50.264151081Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:25.860945Z"},{"id":"GHSA-vh55-786g-wjwj","title":".NET Information Disclosure Vulnerability","description":"Microsoft is releasing this security advisory to provide information about a vulnerability in .NET Core 3.1 and .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nAn information disclosure vulnerability exists in .NET Core 3.1 and .NET 6.0 that could lead to unauthorized access of privileged information.\n\n## \u003ca name=\"affected-software\"\u003e\u003c/a\u003eAffected software\n\n* Any .NET 6.0 application running on .NET 6.0.7 or earlier.\n* Any .NET Core 3.1 applicaiton running on .NET Core 3.1.27 or earlier.\n\nIf your application uses the following package versions, ensure you update to the latest version of .NET.\n\n### \u003ca name=\".NET Core 3.1\"\u003e\u003c/a\u003e.NET Core 3.1\n\nPackage name | Affected version | Patched version\n------------ | ---------------- | -------------------------\n[System.Security.Cryptography.Xml](http://system.security)| \u003c=4.7.0| 4.7.1\n[Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64)| \u003e=3.1.0, 3.1.27| 3.1.28\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm)| \u003e=3.1.0, 3.1.27| 3.1.28\n\n### \u003ca name=\".NET 6\"\u003e\u003c/a\u003e.NET 6\n\nPackage name | Affected version | Patched version\n------------ | ---------------- | -------------------------\n[System.Security.Cryptography.Xml](https://www.nuget.org/packages/System.Security.Cryptography.Xml)| \u003e=5.0.0, 6.0.0| 6.0.1\n[Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.osx-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-arm64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64)| \u003e=6.0.0, 6.0.7| 6.0.8\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm)| \u003e=6.0.0, 6.0.7| 6.0.8\n\n## Patches\n\n\n* If you're using .NET 6.0, you should download and install Runtime 6.0.8 or SDK 6.0.108 (for Visual Studio 2022 v17.1) from https://dotnet.microsoft.com/download/dotnet-core/6.0.\n* If you're using .NET Core 3.1, you should download and install Runtime 3.1.28 (for Visual Studio 2019 v16.9) from https://dotnet.microsoft.com/download/dotnet-core/3.1.\n\n\n### Other\n\nAnnouncement for this issue can be found at https://github.com/dotnet/announcements/issues/232\nAn Issue for this can be found at https://github.com/dotnet/aspnetcore/issues/43166\nMSRC details for this can be found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34716","status":"published","published":"2024-02-03T00:47:54Z","modified":"2025-09-04T18:27:29.192842Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:46:57.348035Z"},{"id":"RHSA-2022:6037","title":"Red Hat Security Advisory: .NET Core 3.1 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:40:51Z","modified":"2026-10-02T10:02:01Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6038","title":"Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:40:44Z","modified":"2025-11-22T12:37:13Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6043","title":"Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:40:59Z","modified":"2026-06-26T12:21:17.865821532Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6057","title":"Red Hat Security Advisory: .NET Core 3.1 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:41:15Z","modified":"2026-10-02T10:02:02Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6058","title":"Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:41:08Z","modified":"2026-06-26T12:21:17.883990873Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RLSA-2022:6057","title":"Moderate: .NET Core 3.1 security, bug fix, and enhancement update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 3.1.422 and .NET Runtime 3.1.28.\n\nSecurity Fix(es):\n\n* dotnet: External Entity Injection during XML signature verification (CVE-2022-34716)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-08-15T07:23:44Z","modified":"2026-02-04T20:45:09.170305Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:6058","title":"Moderate: .NET 6.0 security, bug fix, and enhancement update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.108 and .NET Runtime 6.0.8.\n\nSecurity Fix(es):\n\n* dotnet: External Entity Injection during XML signature verification (CVE-2022-34716)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-08-15T07:40:49Z","modified":"2026-02-05T13:30:13.739232Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"ALSA-2022:6043","title":"Moderate: .NET 6.0 security, bug fix, and enhancement update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.108 and .NET Runtime 6.0.8.\nSecurity Fix(es):\n* dotnet: External Entity Injection during XML signature verification (CVE-2022-34716)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-08-10T00:00:00Z","modified":"2026-10-29T11:31:13.397231985Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:6057","title":"Moderate: .NET Core 3.1 security, bug fix, and enhancement update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 3.1.422 and .NET Runtime 3.1.28.\nSecurity Fix(es):\n* dotnet: External Entity Injection during XML signature verification (CVE-2022-34716)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-08-15T00:00:00Z","modified":"2026-10-29T11:01:48.237361133Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:6058","title":"Moderate: .NET 6.0 security, bug fix, and enhancement update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.108 and .NET Runtime 6.0.8.\nSecurity Fix(es):\n* dotnet: External Entity Injection during XML signature verification (CVE-2022-34716)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-08-15T00:00:00Z","modified":"2026-10-29T11:01:47.579521098Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"BIT-dotnet-2022-34716","title":".NET Spoofing Vulnerability","description":".NET Spoofing Vulnerability","status":"published","published":"2024-03-06T10:57:38.101Z","modified":"2025-09-04T18:27:29.192842Z","updated_at":"2026-11-02T15:28:29.152062Z"},{"id":"BIT-dotnet-sdk-2022-34716","title":".NET Spoofing Vulnerability","description":".NET Spoofing Vulnerability","status":"published","published":"2024-03-06T10:57:43.975Z","modified":"2025-09-04T18:27:29.192842Z","updated_at":"2026-11-02T15:28:29.152062Z"},{"id":"BIT-powershell-2022-34716","title":".NET Spoofing Vulnerability","description":".NET Spoofing Vulnerability","status":"published","published":"2025-09-04T17:48:43.155Z","modified":"2025-09-04T18:27:29.192842Z","updated_at":"2026-11-02T15:28:34.724063Z"}]}}