Threats tagged 'ghsa-6527-9fp8-r4x6'

A denial of service vulnerability exists in Microsoft.AspNetCore.WebUtilities versions 2.3.0 through 2.3.13. The issue arises from the FileBufferingReadStream buffer allocation, which can allow unauthenticated multipart-form requests to exhaust memory. This vulnerability has a CVSS 3.1 base score of 7.5 (high severity). A fixed version 2.3.14 is available to address this issue.