{"id":"CVE-2022-38013","aliases":["ALPINE-CVE-2022-38013","ALSA-2022:6521","ALSA-2022:6523","ALSA-2022:6539","BIT-dotnet-2022-38013","BIT-dotnet-sdk-2022-38013","EUVD-2022-6930","GHSA-r8m2-4x37-6592","RHSA-2022:6520","RHSA-2022:6521","RHSA-2022:6522","RHSA-2022:6523","RHSA-2022:6539","RLSA-2022:6523","RLSA-2022:6539","UBUNTU-CVE-2022-38013","USN-5609-1"],"status":"published","title":".NET Core and Visual Studio Denial of Service Vulnerability","description":".NET Core and Visual Studio Denial of Service Vulnerability","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.04307,"percentile":0.9122,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2022-09-13T00:00:00Z","modified":"2026-11-03T07:31:26Z","fixes":[{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","fixed_in":["3.1.29","6.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","fixed_in":["3.1.29","6.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","fixed_in":["3.1.29","6.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","fixed_in":["3.1.29","6.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","fixed_in":["3.1.29","6.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","fixed_in":["3.1.29","6.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","fixed_in":["3.1.29","6.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","fixed_in":["3.1.29","6.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","fixed_in":["3.1.29","6.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","fixed_in":["3.1.29","6.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","fixed_in":["6.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-arm64","fixed_in":["6.0.9"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.16","package":"dotnet6-build","fixed_in":["6.0.109-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"dotnet6-build","fixed_in":["6.0.109-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"dotnet6-build","fixed_in":["6.0.109-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"dotnet6-build","fixed_in":["6.0.109-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"dotnet6-build","fixed_in":["6.0.109-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"dotnet6-runtime","fixed_in":["6.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"dotnet6-runtime","fixed_in":["6.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"dotnet6-runtime","fixed_in":["6.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"dotnet6-runtime","fixed_in":["6.0.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"dotnet6-runtime","fixed_in":["6.0.9-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"aspnetcore-runtime-6.0","fixed_in":["6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"aspnetcore-targeting-pack-6.0","fixed_in":["6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-apphost-pack-6.0","fixed_in":["6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-host","fixed_in":["6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-hostfxr-6.0","fixed_in":["6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-runtime-6.0","fixed_in":["6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-sdk-6.0","fixed_in":["6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-sdk-6.0-source-built-artifacts","fixed_in":["6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-targeting-pack-6.0","fixed_in":["6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dotnet-templates-6.0","fixed_in":["6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"netstandard-targeting-pack-2.1","fixed_in":["6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-3.1","fixed_in":["3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-3.1","fixed_in":["3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-3.1","fixed_in":["3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-3.1","fixed_in":["3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-runtime-3.1","fixed_in":["3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-3.1","fixed_in":["3.1.423-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-3.1-source-built-artifacts","fixed_in":["3.1.423-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-3.1","fixed_in":["3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-templates-3.1","fixed_in":["3.1.423-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-6.0","fixed_in":["6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-6.0","fixed_in":["6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet","fixed_in":["6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-6.0","fixed_in":["6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-host","fixed_in":["6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-6.0","fixed_in":["6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-runtime-6.0","fixed_in":["6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-6.0","fixed_in":["6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-sdk-6.0-source-built-artifacts","fixed_in":["6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-6.0","fixed_in":["6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dotnet-templates-6.0","fixed_in":["6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"netstandard-targeting-pack-2.1","fixed_in":["6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"dotnet","fixed_in":["6.0.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"dotnet-sdk","fixed_in":["6.0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-aspnetcore-runtime-6.0","fixed_in":["0:6.0.9-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-aspnetcore-targeting-pack-6.0","fixed_in":["0:6.0.9-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet","fixed_in":["0:6.0.109-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-apphost-pack-6.0","fixed_in":["0:6.0.9-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-debuginfo","fixed_in":["0:6.0.109-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-host","fixed_in":["0:6.0.9-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-hostfxr-6.0","fixed_in":["0:6.0.9-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-runtime-6.0","fixed_in":["0:6.0.9-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-sdk-6.0","fixed_in":["0:6.0.109-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts","fixed_in":["0:6.0.109-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-targeting-pack-6.0","fixed_in":["0:6.0.9-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-templates-6.0","fixed_in":["0:6.0.109-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-netstandard-targeting-pack-2.1","fixed_in":["0:6.0.109-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"aspnetcore-runtime-6.0","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"aspnetcore-targeting-pack-6.0","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-apphost-pack-6.0","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-apphost-pack-6.0-debuginfo","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-host","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-host-debuginfo","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-hostfxr-6.0","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-hostfxr-6.0-debuginfo","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-runtime-6.0","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-runtime-6.0-debuginfo","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-sdk-6.0","fixed_in":["0:6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-sdk-6.0-debuginfo","fixed_in":["0:6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-targeting-pack-6.0","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-templates-6.0","fixed_in":["0:6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0","fixed_in":["0:6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0-debuginfo","fixed_in":["0:6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0-debugsource","fixed_in":["0:6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"netstandard-targeting-pack-2.1","fixed_in":["0:6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-apphost-pack-6.0-debuginfo","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-host-debuginfo","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-hostfxr-6.0-debuginfo","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-runtime-6.0-debuginfo","fixed_in":["0:6.0.9-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-sdk-6.0-debuginfo","fixed_in":["0:6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-sdk-6.0-source-built-artifacts","fixed_in":["0:6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet6.0-debuginfo","fixed_in":["0:6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet6.0-debugsource","fixed_in":["0:6.0.109-1.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-runtime-3.1","fixed_in":["0:3.1.29-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-targeting-pack-3.1","fixed_in":["0:3.1.29-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet","fixed_in":["0:3.1.423-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-apphost-pack-3.1","fixed_in":["0:3.1.29-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-debuginfo","fixed_in":["0:3.1.423-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-host","fixed_in":["0:3.1.29-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-hostfxr-3.1","fixed_in":["0:3.1.29-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-runtime-3.1","fixed_in":["0:3.1.29-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-sdk-3.1","fixed_in":["0:3.1.423-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts","fixed_in":["0:3.1.423-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-targeting-pack-3.1","fixed_in":["0:3.1.29-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-templates-3.1","fixed_in":["0:3.1.423-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-netstandard-targeting-pack-2.1","fixed_in":["0:3.1.423-1.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-3.1","fixed_in":["0:3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-3.1","fixed_in":["0:3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1","fixed_in":["0:3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1-debuginfo","fixed_in":["0:3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1","fixed_in":["0:3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1-debuginfo","fixed_in":["0:3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1","fixed_in":["0:3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1-debuginfo","fixed_in":["0:3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1","fixed_in":["0:3.1.423-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1-debuginfo","fixed_in":["0:3.1.423-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-3.1","fixed_in":["0:3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-3.1","fixed_in":["0:3.1.423-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1","fixed_in":["0:3.1.423-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debuginfo","fixed_in":["0:3.1.423-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debugsource","fixed_in":["0:3.1.423-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-3.1-debuginfo","fixed_in":["0:3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-3.1-debuginfo","fixed_in":["0:3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-3.1-debuginfo","fixed_in":["0:3.1.29-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-3.1-debuginfo","fixed_in":["0:3.1.423-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-3.1-source-built-artifacts","fixed_in":["0:3.1.423-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet3.1-debuginfo","fixed_in":["0:3.1.423-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet3.1-debugsource","fixed_in":["0:3.1.423-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-6.0","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-6.0","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet","fixed_in":["0:6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-6.0","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-6.0-debuginfo","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host-debuginfo","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-6.0","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-6.0-debuginfo","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-6.0","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-6.0-debuginfo","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-6.0","fixed_in":["0:6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-6.0-debuginfo","fixed_in":["0:6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-6.0","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-6.0","fixed_in":["0:6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0","fixed_in":["0:6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0-debuginfo","fixed_in":["0:6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0-debugsource","fixed_in":["0:6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netstandard-targeting-pack-2.1","fixed_in":["0:6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-6.0-debuginfo","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-host-debuginfo","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-6.0-debuginfo","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-6.0-debuginfo","fixed_in":["0:6.0.9-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-6.0-debuginfo","fixed_in":["0:6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-6.0-source-built-artifacts","fixed_in":["0:6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet6.0-debuginfo","fixed_in":["0:6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet6.0-debugsource","fixed_in":["0:6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"dotnet3.1","fixed_in":["0:3.1.423-1.el8_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"dotnet6.0","fixed_in":["0:6.0.109-1.el8_6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"dotnet6","fixed_in":["6.0.109-0ubuntu1~22.04.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"dotnet6-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"dotnet6-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"dotnet6-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"dotnet6-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"dotnet6-build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"dotnet6-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"dotnet6-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"dotnet6-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"dotnet6-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"dotnet6-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.423-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-3.1-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.423-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.423-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"dotnet","ranges":[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.0.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"dotnet-sdk","ranges":[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.0.1"}]}]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.28","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.28","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.28","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.28","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.28","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.28","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.28","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}],"versions":["3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.28","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.28","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1.0"},{"fixed":"3.1.29"}]}],"versions":["3.1.0","3.1.1","3.1.10","3.1.11","3.1.12","3.1.13","3.1.14","3.1.15","3.1.16","3.1.17","3.1.18","3.1.19","3.1.2","3.1.20","3.1.21","3.1.22","3.1.23","3.1.24","3.1.25","3.1.26","3.1.27","3.1.28","3.1.3","3.1.4","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.17","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","6.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.17","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","6.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}],"versions":["5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.17","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","6.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.17","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","6.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-musl-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.17","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","6.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.linux-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.17","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","6.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}],"versions":["6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","6.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.osx-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.17","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","6.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.17","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","6.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.17","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","6.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.17","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","6.0.8"]},{"source":"osv","ecosystem":"NuGet","package":"Microsoft.AspNetCore.App.Runtime.win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"fixed":"6.0.9"}]}],"versions":["5.0.0","5.0.1","5.0.10","5.0.11","5.0.12","5.0.13","5.0.14","5.0.15","5.0.16","5.0.17","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.0.8","5.0.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","6.0.8"]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:6.0::el7","package":"rh-dotnet60-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_dotnet:3.1::el7","package":"rh-dotnet31-netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet3.1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.29-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-3.1-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet3.1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet3.1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"aspnetcore-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-targeting-pack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet-templates-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"netstandard-targeting-pack-2.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-apphost-pack-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-hostfxr-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-runtime-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet-sdk-6.0-source-built-artifacts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet6.0-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"dotnet6.0-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dotnet3.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.423-1.el8_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dotnet6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.109-1.el8_6"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dotnet6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-0ubuntu1~22.04.1"}]}],"versions":["6.0.108-0ubuntu1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dotnet6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.109-0ubuntu1~22.04.1"}]}],"versions":["6.0.108-0ubuntu1~22.04.1"]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"microsoft","product":".net"},{"vendor":"microsoft","product":".net 6.0"},{"vendor":"microsoft","product":".net core 3.1"},{"vendor":"microsoft","product":".net_core"},{"vendor":"microsoft","product":"microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10)"},{"vendor":"microsoft","product":"microsoft visual studio 2019 version 16.9 (includes 16.0 - 16.8)"},{"vendor":"microsoft","product":"microsoft visual studio 2022 version 17.0"},{"vendor":"microsoft","product":"microsoft visual studio 2022 version 17.2"},{"vendor":"microsoft","product":"microsoft visual studio 2022 version 17.3"},{"vendor":"microsoft","product":"visual studio 2022 for mac version 17.3"},{"vendor":"microsoft","product":"visual_studio_2019"},{"vendor":"microsoft","product":"visual_studio_2022"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38013","tags":["vendor-advisory","web","report"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013","tags":["x_transferred","Patch","Vendor Advisory","advisory","fix","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38013","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M","tags":["web"]},{"url":"https://github.com/advisories/GHSA-r8m2-4x37-6592"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-38013","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6521","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38013","tags":["report"]},{"url":"https://bugzilla.redhat.com/2125124","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-6521.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6523","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-6523.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6539","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-6539.html","tags":["advisory"]},{"url":"https://github.com/dotnet/aspnetcore","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6520","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125124","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6520.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38013","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6521.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6522","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6522.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6523.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6539.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:6523","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:6539","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-38013","tags":["report"]},{"url":"https://devblogs.microsoft.com/dotnet/september-2022-updates/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5609-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-38013","title":".NET Core and Visual Studio Denial of Service Vulnerability","description":".NET Core and Visual Studio Denial of Service Vulnerability","status":"published","published":"2022-09-13T00:00:00Z","modified":"2026-05-27T13:49:37.761Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:37.272373Z"}],"euvd":[{"id":"EUVD-2022-6930","description":".NET Core and Visual Studio Denial of Service Vulnerability","status":"published","published":"2022-09-13T00:00:00Z","modified":"2026-05-27T13:49:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T18:21:04.78276Z"}],"ghsa":[{"id":"GHSA-r8m2-4x37-6592","title":".NET Denial of Service Vulnerability","description":"Microsoft is releasing this security advisory to provide information about a vulnerability in .NET Core 3.1 and .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nA denial of service vulnerability exists in ASP.NET Core 3.1 and .NET 6.0 where a malicious client could cause a stack overflow which may result in a denial of service attack when an attacker sends a customized payload that is parsed during model binding.\n\n## \u003ca name=\"affected-software\"\u003e\u003c/a\u003eAffected software\n* Any .NET 6.0 application running on .NET 6.0.8 or earlier.\n* Any ASP.NET Core 3.1 application running on .NET Core 3.1.28 or earlier.\nIf your application uses the following package versions, ensure you update to the latest version of .NET.\n### \u003ca name=\"ASP.NET Core 3.1\"\u003e\u003c/a\u003e.NET Core 3.1\nPackage name | Affected version | Patched version\n------------ | ---------------- | -------------------------\n[Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64)|\u003e= 3.1.5, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n### \u003ca name=\".NET 6\"\u003e\u003c/a\u003e.NET 6\nPackage name | Affected version | Patched version\n------------ | ---------------- | -------------------------\n[Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm)|\u003e= 5.0.1, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.osx-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-arm64)|\u003e= 6.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n\n\n\n### Other\n\nAnnouncement for this issue can be found at https://github.com/dotnet/announcements/issues/234\nAn Issue for this can be found at https://github.com/dotnet/aspnetcore/issues/43953\nMSRC details for this can be found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38013","status":"published","published":"2022-09-15T03:25:36Z","modified":"2026-06-08T23:41:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:40:21.48274Z"}],"nvd":[{"id":"CVE-2022-38013","description":".NET Core and Visual Studio Denial of Service Vulnerability","status":"published","published":"2022-09-13T19:15:12.867Z","modified":"2026-06-17T04:55:54.78Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:07:27.631109Z"}],"osv":[{"id":"ALPINE-CVE-2022-38013","description":".NET Core and Visual Studio Denial of Service Vulnerability","status":"published","published":"2022-09-13T19:15:12.867Z","modified":"2026-11-03T07:31:26.048794694Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"CVE-2022-38013","description":".NET Core and Visual Studio Denial of Service Vulnerability","status":"published","published":"2022-09-13T19:15:12.867Z","modified":"2026-10-24T10:30:43.049377503Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:26.53798Z"},{"id":"GHSA-r8m2-4x37-6592","title":".NET Denial of Service Vulnerability","description":"Microsoft is releasing this security advisory to provide information about a vulnerability in .NET Core 3.1 and .NET 6.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nA denial of service vulnerability exists in ASP.NET Core 3.1 and .NET 6.0 where a malicious client could cause a stack overflow which may result in a denial of service attack when an attacker sends a customized payload that is parsed during model binding.\n\n## \u003ca name=\"affected-software\"\u003e\u003c/a\u003eAffected software\n* Any .NET 6.0 application running on .NET 6.0.8 or earlier.\n* Any ASP.NET Core 3.1 application running on .NET Core 3.1.28 or earlier.\nIf your application uses the following package versions, ensure you update to the latest version of .NET.\n### \u003ca name=\"ASP.NET Core 3.1\"\u003e\u003c/a\u003e.NET Core 3.1\nPackage name | Affected version | Patched version\n------------ | ---------------- | -------------------------\n[Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64)|\u003e= 3.1.5, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n[Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86)|\u003e= 3.1.0, \u003c 3.1.29|3.1.29\n### \u003ca name=\".NET 6\"\u003e\u003c/a\u003e.NET 6\nPackage name | Affected version | Patched version\n------------ | ---------------- | -------------------------\n[Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm)|\u003e= 5.0.1, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.osx-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-arm64)|\u003e= 6.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n[Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86)|\u003e= 5.0.0, \u003c 6.0.9|6.0.9\n\n\n\n### Other\n\nAnnouncement for this issue can be found at https://github.com/dotnet/announcements/issues/234\nAn Issue for this can be found at https://github.com/dotnet/aspnetcore/issues/43953\nMSRC details for this can be found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38013","status":"published","published":"2022-09-15T03:25:36Z","modified":"2026-06-08T23:45:21.130432835Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:55.480549Z"},{"id":"RHSA-2022:6520","title":"Red Hat Security Advisory: .NET 6.0 on RHEL 7 security and bugfix update","status":"published","published":"2024-09-16T08:59:22Z","modified":"2026-01-14T11:05:12.321984Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6521","title":"Red Hat Security Advisory: .NET 6.0 security and bugfix update","status":"published","published":"2024-09-16T08:59:14Z","modified":"2026-06-26T12:22:18.319542056Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:6522","title":"Red Hat Security Advisory: .NET Core 3.1 on RHEL 7 security and bugfix update","status":"published","published":"2024-09-16T08:59:30Z","modified":"2026-01-14T11:05:12.268556Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:6523","title":"Red Hat Security Advisory: .NET Core 3.1 security and bugfix update","status":"published","published":"2024-09-16T08:59:07Z","modified":"2026-06-26T12:21:17.807549514Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:6539","title":"Red Hat Security Advisory: .NET 6.0 security and bugfix update","status":"published","published":"2024-09-16T08:59:38Z","modified":"2026-06-26T12:22:10.36384491Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:6523","title":"Moderate: .NET Core 3.1 security and bugfix update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 3.1.423 and .NET Runtime 3.1.29.\n\nSecurity Fix(es):\n\n* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-09-14T13:23:42Z","modified":"2026-02-05T02:00:10.57885Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:6539","title":"Moderate: .NET 6.0 security and bugfix update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.109 and .NET Runtime 6.0.9.\n\nSecurity Fix(es):\n\n* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-09-15T07:29:51Z","modified":"2026-02-04T17:15:13.014433Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-38013","description":".NET Core and Visual Studio Denial of Service Vulnerability","status":"published","published":"2022-09-13T00:00:00Z","modified":"2026-02-04T02:48:00.135722Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"ALSA-2022:6521","title":"Moderate: .NET 6.0 security and bugfix update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET 6.0 to SDK 6.0.109 and Runtime 6.0.9.\n\nSecurity Fix(es):\n\n* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-09-14T00:00:00Z","modified":"2026-10-29T11:31:16.629840736Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:6523","title":"Moderate: .NET Core 3.1 security and bugfix update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 3.1.423 and .NET Runtime 3.1.29.\n\nSecurity Fix(es):\n\n* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-09-14T00:00:00Z","modified":"2026-10-29T11:01:20.184941595Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:6539","title":"Moderate: .NET 6.0 security and bugfix update","description":".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.109 and .NET Runtime 6.0.9.\n\nSecurity Fix(es):\n\n* dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. (CVE-2022-38013)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-09-15T00:00:00Z","modified":"2026-10-29T11:01:47.333116625Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"BIT-dotnet-2022-38013","title":".NET Core and Visual Studio Denial of Service Vulnerability","description":".NET Core and Visual Studio Denial of Service Vulnerability","status":"published","published":"2024-03-06T10:57:24.899Z","modified":"2026-09-08T08:46:50.105410251Z","updated_at":"2026-11-02T15:28:29.152062Z"},{"id":"BIT-dotnet-sdk-2022-38013","title":".NET Core and Visual Studio Denial of Service Vulnerability","description":".NET Core and Visual Studio Denial of Service Vulnerability","status":"published","published":"2024-03-06T10:57:32.177Z","modified":"2026-09-08T08:46:42.612197651Z","updated_at":"2026-11-02T15:28:29.152062Z"},{"id":"USN-5609-1","title":"dotnet6 vulnerability","description":"Graham Esau discovered that .NET 6 incorrectly parsed certain payloads\nduring model binding. An attacker could possibly use this issue to\ncause a denial of service.\n","status":"published","published":"2022-09-13T21:03:03Z","modified":"2026-02-10T04:42:46Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}