dotnet-host

Direct Vulnerabilities

Known vulnerabilities in the dotnet-host package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Improper Verification of Cryptographic Signature	*
H Incorrect Authorization	*
H Weak Password Recovery Mechanism for Forgotten Password	*
H Allocation of Resources Without Limits or Throttling	*
H Authentication Bypass	*
H Arbitrary Code Injection	*
H Allocation of Resources Without Limits or Throttling	*
H Uncontrolled Recursion	*
M Information Exposure	*
H Algorithmic Complexity	*
M Information Exposure Through Caching	*
M Origin Validation Error	<0:10.0.12-1.el10_2
H Information Exposure	<0:10.0.12-1.el10_2
H Unchecked Input for Loop Condition	<0:10.0.11-1.el10_2
M Improper Cross-boundary Removal of Sensitive Data	<0:10.0.11-1.el10_2
M HTTP Request Smuggling	<0:10.0.11-1.el10_2
H Unchecked Return Value	<0:10.0.11-1.el10_2
M Inappropriate Encoding for Output Context	<0:10.0.10-1.el10_2
H Incorrect Implementation of Authentication Algorithm	<0:10.0.10-1.el10_2
H Allocation of Resources Without Limits or Throttling	<0:10.0.10-1.el10_2
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<0:10.0.10-1.el10_2
H Allocation of Resources Without Limits or Throttling	<0:10.0.10-1.el10_2
H Allocation of Resources Without Limits or Throttling	<0:10.0.10-1.el10_2
M Link Following	<0:10.0.10-1.el10_2
H Buffer Overflow	<0:10.0.10-1.el10_2
H Access of Resource Using Incompatible Type ('Type Confusion')	<0:10.0.10-1.el10_2
H Arbitrary Code Injection	<0:10.0.10-1.el10_2
H External Control of Assumed-Immutable Web Parameter	<0:10.0.10-1.el10_2
H Deserialization of Untrusted Data	<0:10.0.10-1.el10_2
H Reliance on Untrusted Inputs in a Security Decision	<0:10.0.10-1.el10_2
H Allocation of Resources Without Limits or Throttling	<0:10.0.10-1.el10_2
H Improper Validation of Specified Type of Input	<0:10.0.10-1.el10_2
H Improper Verification of Cryptographic Signature	<0:10.0.10-1.el10_2
H Allocation of Resources Without Limits or Throttling	<0:10.0.10-1.el10_2
M Link Following	<0:10.0.9-1.el10_2
H Allocation of Resources Without Limits or Throttling	<0:10.0.9-1.el10_2
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:10.0.8-1.el10_2
H Improper Neutralization of Special Elements	<0:10.0.6-1.el10_1
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<0:10.0.6-1.el10_1
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<0:10.0.6-1.el10_1
H Out-of-bounds Write	<0:10.0.6-1.el10_1
M Out-of-bounds Read	<0:10.0.4-1.el10_1
H Allocation of Resources Without Limits or Throttling	<0:10.0.4-1.el10_1
M Incorrect Default Permissions	*
H HTTP Request Smuggling	<0:10.0.0~rc.2.25502.107-0.12.el10_1
H Cleartext Transmission of Sensitive Information	<0:9.0.10-1.el10_0
M Insecure Temporary File	<0:10.0.0~rc.2.25502.107-0.12.el10_1
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
H Uncontrolled Search Path Element	<0:9.0.6-1.el10_0
H Authentication Bypass	<0:9.0.5-1.el10_0

Vulnerability

Vulnerable Version

Improper Verification of Cryptographic Signature