Skip to content
OpenAdvisories

Product · dotnet

eShop

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-105444

    dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injection

    A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in impro…

    dotnet eShop