Threats tagged 'ghsa-f7vh-h5g3-7jrh'

A vulnerability in Aspire.Hosting.AppHost prior to version 13.6.5 allows an attacker-controlled container to replay an authenticated Aspire Dashboard session cookie, potentially enabling code execution as the host developer. This affects macOS platforms on x64 and Arm64 architectures. The issue arises when an authenticated AppHost workflow routes to a linked HTTPS YARP gateway controlled by an attacker. A fix is available in version 13.6.5.