Description
YARP Denial of Service Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | YARP 1.0 | 1.0.0 – < 1.0.1 | 1.0.1 |
| Microsoft | YARP 1.1RC | 1.1.0 – < 1.1.0-rc.1.22211.2 | 1.1.0-rc.1.22211.2 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Yarp.ReverseProxy | < 1.0.1 | 1.0.1 | GHSA-8xc6-g8xw-h2c4 |
| NuGet | Yarp.ReverseProxy | >= 1.1.0-rc.1.22152.1, < 1.1.0-rc.1.22211.2 | 1.1.0-rc.1.22211.2 | GHSA-8xc6-g8xw-h2c4 |
Advisories 1
- MSRC-CVE-2022-26924 YARP Denial of Service Vulnerability Microsoft Security Response Center · Apr 12, 2022
References
- YARP Denial of Service Vulnerability vendor-advisory