dotnet | Snyk

Direct Vulnerabilities

Known vulnerabilities in the dotnet package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Weak Password Recovery Mechanism for Forgotten Password	*
H Authentication Bypass	*
M Information Exposure	*
H Improper Certificate Validation	*
H Allocation of Resources Without Limits or Throttling	*
H Incorrect Authorization	*
H Improper Verification of Cryptographic Signature	*
H Allocation of Resources Without Limits or Throttling	*
H Algorithmic Complexity	*
H Uncontrolled Recursion	*
H Arbitrary Code Injection	*
H Incomplete Blacklist	*
H Arbitrary Code Injection	*
M Unchecked Input for Loop Condition	*
M Information Exposure Through Caching	*
H Information Exposure Through Caching	*
H Allocation of Resources Without Limits or Throttling	*
M Improper Validation of Specified Quantity in Input	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Inappropriate Encoding for Output Context	*
M Improper Handling of Case Sensitivity	*
H Information Exposure	<0:10.0.112-1.el8_10
H Origin Validation Error	<0:10.0.112-1.el8_10
M NULL Pointer Dereference	*
H Reliance on Untrusted Inputs in a Security Decision	*
H Unchecked Return Value	<0:10.0.111-1.el8_10
H Unchecked Input for Loop Condition	<0:10.0.111-1.el8_10
H Improper Cross-boundary Removal of Sensitive Data	<0:10.0.111-1.el8_10
H HTTP Request Smuggling	<0:10.0.111-1.el8_10
H Inappropriate Encoding for Output Context	<0:10.0.110-1.el8_10
H Deserialization of Untrusted Data	<0:10.0.110-1.el8_10
H Allocation of Resources Without Limits or Throttling	<0:10.0.110-1.el8_10
H Allocation of Resources Without Limits or Throttling	<0:10.0.110-1.el8_10
H Allocation of Resources Without Limits or Throttling	<0:10.0.110-1.el8_10
H Reliance on Untrusted Inputs in a Security Decision	<0:10.0.110-1.el8_10
H Arbitrary Code Injection	<0:10.0.110-1.el8_10
H Improper Verification of Cryptographic Signature	<0:10.0.110-1.el8_10
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<0:10.0.110-1.el8_10
H Allocation of Resources Without Limits or Throttling	<0:10.0.110-1.el8_10
H Improper Validation of Specified Type of Input	<0:10.0.110-1.el8_10
H External Control of Assumed-Immutable Web Parameter	<0:10.0.110-1.el8_10
H Access of Resource Using Incompatible Type ('Type Confusion')	<0:10.0.110-1.el8_10
H Incorrect Implementation of Authentication Algorithm	<0:10.0.110-1.el8_10
H Buffer Overflow	<0:10.0.110-1.el8_10
H Link Following	<0:10.0.110-1.el8_10
H Allocation of Resources Without Limits or Throttling	<0:10.0.110-1.el8_10
M Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	<0:10.0.109-1.el8_10
H Link Following	<0:10.0.109-1.el8_10
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:10.0.108-1.el8_10
H Improper Neutralization of Special Elements	<0:10.0.106-1.el8_10
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<0:10.0.106-1.el8_10
H Out-of-bounds Write	<0:10.0.106-1.el8_10
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	<0:10.0.106-1.el8_10
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Allocation of Resources Without Limits or Throttling	<0:10.0.104-1.el8_10
M Out-of-bounds Read	<0:10.0.104-1.el8_10
H Insecure Temporary File	<0:9.0.111-1.el8_10
H Cleartext Transmission of Sensitive Information	<0:9.0.111-1.el8_10
H HTTP Request Smuggling	<0:9.0.111-1.el8_10
H Uncontrolled Search Path Element	<0:9.0.107-1.el8_10
M Cross-site Scripting (XSS)	*
H Authentication Bypass	<0:9.0.106-1.el8_10
M Cross-site Scripting (XSS)	*
H Improper Privilege Management	<0:9.0.104-1.el8_10
H Algorithmic Complexity	<0:8.0.110-1.el8_10
H Allocation of Resources Without Limits or Throttling	<0:8.0.110-1.el8_10
H Algorithmic Complexity	<0:8.0.110-1.el8_10
H Use After Free	<0:8.0.110-1.el8_10
H Buffer Over-read	<0:9.0.102-1.el8_10
H Creation of Temporary File in Directory with Incorrect Permissions	<0:9.0.102-1.el8_10
H Improper Restriction of Names for Files and Other Resources	<0:9.0.102-1.el8_10
H Heap-based Buffer Overflow	<0:9.0.102-1.el8_10
M Cross-site Scripting (XSS)	*
M Information Exposure	<0:8.0.108-1.el8_10
H CVE-2024-38095	<0:8.0.107-1.el8_10
H CVE-2024-35264	<0:8.0.107-1.el8_10
H CVE-2024-30105	<0:8.0.107-1.el8_10
H Deadlock	<0:8.0.105-1.el8_10
H Out-of-Bounds	<0:8.0.105-1.el8_10
M Resource Exhaustion	*
M Resource Exhaustion	<0:8.0.103-1.el8_9
H Resource Exhaustion	<0:8.0.102-2.el8_9
H CVE-2024-21386	<0:8.0.102-2.el8_9
H Improper Certificate Validation	<0:8.0.101-1.el8_9
H Unprotected Alternate Channel	<0:8.0.101-1.el8_9
H Resource Exhaustion	<0:8.0.101-1.el8_9
M Arbitrary Code Injection	<0:8.0.100-2.el8_9
M CVE-2023-36558	<0:8.0.100-2.el8_9
H Use of Password Hash With Insufficient Computational Effort	*
H Resource Exhaustion	<0:7.0.112-1.el8_8
M Resource Exhaustion	<0:7.0.113-1.el8_8
H Resource Exhaustion	<0:7.0.110-1.el8_8
H CVE-2023-35390	<0:7.0.110-1.el8_8
H Race Condition	<0:7.0.109-1.el8_8
H CVE-2023-32032	<0:7.0.107-1.el8_8
H CVE-2023-33128	<0:7.0.107-1.el8_8
H CVE-2023-29337	<0:7.0.107-1.el8_8
H CVE-2023-29331	<0:7.0.107-1.el8_8
H CVE-2023-24936	<0:7.0.107-1.el8_8
M Inefficient Regular Expression Complexity	*
M Information Exposure Through Caching	<0:6.0.110-1.el8_6
M Resource Exhaustion	<0:6.0.109-1.el8_6
M XML External Entity (XXE) Injection	<0:6.0.108-1.el8_6
M Improper Cross-boundary Removal of Sensitive Data	<0:6.0.106-1.el8_6
L Cross-site Scripting (XSS)	*
M Exposure of Private Information ('Privacy Violation')	<0:6.0.107-1.el8_6
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:6.0.105-1.el8_6
H Reliance on Cookies without Validation and Integrity Checking	<0:6.0.105-1.el8_6
H Allocation of Resources Without Limits or Throttling	<0:6.0.105-1.el8_6
M Improper Use of Validation Framework	*
H Buffer Overflow	<0:6.0.103-4.el8_5
H Improper Use of Validation Framework	<0:6.0.103-4.el8_5
M Authorization Bypass Through User-Controlled Key	*
M Cleartext Transmission of Sensitive Information	*
H Allocation of Resources Without Limits or Throttling	<0:6.0.102-1.el8_5
M Open Redirect	*
H Cleartext Transmission of Sensitive Information	<0:5.0.208-1.el8_4
H Information Exposure Through Log Files	<0:5.0.206-1.el8_4
H Incorrect Permission Assignment for Critical Resource	<0:5.0.206-1.el8_4
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:5.0.206-1.el8_4
H Missing Release of Resource after Effective Lifetime	<0:5.0.204-1.el8_4
H Improper Check for Dropped Privileges	<0:5.0.203-1.el8_4
H Out-of-Bounds	<0:5.0.104-1.el8_3
H Uncontrolled Recursion	<0:5.0.103-1.el8_3
H Deadlock	<0:5.0.102-2.el8_3
H Reliance on Untrusted Inputs in a Security Decision	<0:3.1.108-2.el8_2
H Resource Exhaustion	<0:3.1.107-1.el8_2
C Deserialization of Untrusted Data	<0:3.1.106-1.el8_2
H Resource Exhaustion	<0:3.1.104-2.el8_2
H Integer Overflow or Wraparound	<0:3.1.104-2.el8_2
H Resource Exhaustion	<0:3.0.102-2.el8_1
C Out-of-Bounds	<0:3.0.102-2.el8_1
M Improper Input Validation	<0:2.1.509-1.el8_0
H Resource Exhaustion	<0:2.1.507-2.el8_0
H Resource Exhaustion	<0:2.1.507-2.el8_0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:2.1.507-2.el8_0
H Incorrect Permission Assignment for Critical Resource	<0:2.1.507-2.el8_0

Vulnerability

Vulnerable Version

Weak Password Recovery Mechanism for Forgotten Password