Threats tagged 'ghsa-vmv3-wvjp-wqpj'

A denial of service vulnerability exists in the System.Formats.Cbor NuGet package used in .NET. The issue arises from colliding CBOR map keys that can cause hash-flooding in uniqueness checks. This vulnerability affects multiple package versions across the 8.0, 9.0, 10.0, and 11.0 series. Microsoft has released patched versions to address this by implementing seeded Marvin hashing to mitigate the hash collision attack.