Skip to content
OpenAdvisories

Vendor

dotnet

2 known vulnerabilities.

Products

eShop 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-105444

    dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injection

    A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in impro…

    dotnet eShop