Threats tagged 'ghsa-q7j6-px74-p2vw'

A vulnerability in the .NET SDK's dotnet-watch component allows a local attacker to elevate privileges by replacing or modifying temporary solution files used during builds. The issue affects Linux and macOS platforms with certain versions of the .NET SDK and the Microsoft.DotNet.HotReload.Watch.Aspire package. Microsoft has released fixed versions that store generated solution files in a private temporary directory and keep files open with read-only sharing during builds to prevent tampering.