Threats tagged 'ghsa-5h82-77p6-2wp3'

A high-severity vulnerability (CVE-2026-118748) affects ASP.NET Core versions 11.0.0-preview.7.26381.103 through 11.0.0-rc.3.26522.148 across multiple platforms and architectures. The flaw involves Blazor static-SSR client validation retaining attacker-controlled rendered field names in an unbounded singleton cache, which can lead to remote process memory exhaustion, causing denial of service. A fixed version 11.0.0 is available and should be applied to mitigate the issue.