Nixpkgs security tracker
Dismissed
(no matching packages found)
Permalink
CVE-2026-69304
5.9 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): High (H)
- Privileges Required (PR): None (N)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): None (N)
- Availability (A): High (H)
- Exploit Code Maturity (E): Unproven (U)
- Remediation Level (RL): Official Fix (O)
- Report Confidence (RC): Confirmed (C)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): High (H)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): High (H)
Activity log
- Created & dismissed (no matching packages found) suggestion
ASP.NET Core Denial of Service Vulnerability
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
References
Affected products
.NET 8.0
- <8.0.31
.NET 9.0
- <9.0.20
.NET 10.0
- <10.0.12
ASP.NET Core 8.0
- <8.0.31
ASP.NET Core 9.0
- <9.0.20
ASP.NET Core 10.0
- <10.0.12
ASP.NET Core 11.0
- <11.0 RC1
Microsoft Visual Studio 2026 version 18.9
- <18.9.3
Microsoft Visual Studio 2022 version 17.14
- <17.14.40