aspnetcore-targeting-pack-7.0

Direct Vulnerabilities

Known vulnerabilities in the aspnetcore-targeting-pack-7.0 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M HTTP Request Smuggling	*
M Origin Validation Error	*
M Origin Validation Error	*
M Unchecked Input for Loop Condition	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Insecure Temporary File	*
H Cleartext Transmission of Sensitive Information	*
H Authentication Bypass	*
H Uncontrolled Search Path Element	*
H Improper Privilege Management	*
H Heap-based Buffer Overflow	*
H Improper Restriction of Names for Files and Other Resources	*
M Improper Authorization	*
H Creation of Temporary File in Directory with Incorrect Permissions	*
H Incorrect Type Conversion or Cast	*
H CVE-2024-43499	*
M Uncontrolled Recursion	*
H Allocation of Resources Without Limits or Throttling	*
H Algorithmic Complexity	*
H Buffer Over-read	*
H Algorithmic Complexity	*
H CVE-2024-30105	*
H Use After Free	*
M CVE-2024-38095	*
H CVE-2024-38081	*
H CVE-2024-35264	*
H Allocation of Resources Without Limits or Throttling	*
H HTTP Request Smuggling	*
M Information Exposure Through Caching	*
M Improper Input Validation	*
L HTTP Request Smuggling	*
M CVE-2025-48068	*
L Race Condition	*
L Information Exposure	*
M Allocation of Resources Without Limits or Throttling	*
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
H Deadlock	<0:7.0.19-1.el9_4
H Out-of-Bounds	<0:7.0.19-1.el9_4
M Resource Exhaustion	<0:7.0.17-1.el9_3
H Resource Exhaustion	<0:7.0.19-1.el9_4
H CVE-2024-21386	<0:7.0.19-1.el9_4
H Resource Exhaustion	<0:7.0.15-1.el9_3
H Unprotected Alternate Channel	<0:7.0.15-1.el9_3
H Improper Certificate Validation	<0:7.0.15-1.el9_3
M CVE-2023-36558	<0:7.0.14-1.el9_3
M Arbitrary Code Injection	<0:7.0.14-1.el9_3
H Use of Password Hash With Insufficient Computational Effort	<0:7.0.15-1.el9_3
H Resource Exhaustion	<0:7.0.12-1.el9_2
M Resource Exhaustion	<0:7.0.13-1.el9_2
H Resource Exhaustion	<0:7.0.10-1.el9_2
H CVE-2023-35390	<0:7.0.10-1.el9_2
H Race Condition	<0:7.0.9-1.el9_2
H CVE-2023-32032	<0:7.0.7-1.el9_2
H CVE-2023-33128	<0:7.0.7-1.el9_2
H CVE-2023-29337	<0:7.0.7-1.el9_2
H CVE-2023-29331	<0:7.0.7-1.el9_2
H CVE-2023-24936	<0:7.0.7-1.el9_2
M Information Exposure Through Caching	<0:7.0.0-0.5.rc2.el9_1

Vulnerability

Vulnerable Version

HTTP Request Smuggling