Description
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | ASP.NET Core | 2.1, 2.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Microsoft.AspNetCore.SignalR.Protocols.MessagePack | >= 1.1.0, < 1.1.5 | 1.1.5 | GHSA-4jxx-4qxw-prxm |
| NuGet | Microsoft.AspNetCore.SignalR.Protocols.MessagePack | >= 1.0.0, < 1.0.11 | 1.0.11 | GHSA-4jxx-4qxw-prxm |