Threats tagged 'ghsa-3893-7fxc-qvff'

A denial of service vulnerability exists in Microsoft.AspNetCore.Server.HttpSys where malformed chunked HTTP requests with conflicting content-length headers can cause resource retention. This affects certain versions of ASP.NET Core on Windows platforms. The issue is rated high severity with a CVSS score of 7.5. Fixed versions have been released for standalone packages and runtime packages across multiple .NET versions. Users should update to the fixed versions to mitigate the risk.