dotnet-apphost-pack-9.0

Direct Vulnerabilities

Known vulnerabilities in the dotnet-apphost-pack-9.0 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
C Weak Password Recovery Mechanism for Forgotten Password	<0:9.0.21-1.0.1.el9_8
C Allocation of Resources Without Limits or Throttling	<0:9.0.21-1.0.1.el9_8
C Link Following	<0:9.0.21-1.0.1.el9_8
C Algorithmic Complexity	<0:9.0.21-1.0.1.el9_8
C Information Exposure	<0:9.0.21-1.0.1.el9_8
C Algorithmic Complexity	<0:9.0.21-1.0.1.el9_8
C HTTP Request Smuggling	<0:9.0.21-1.0.1.el9_8
C Deadlock	<0:9.0.21-1.0.1.el9_8
C Origin Validation Error	<0:9.0.21-1.0.1.el9_8
C Out-of-bounds Write	<0:9.0.21-1.0.1.el9_8
C Cross-site Scripting (XSS)	<0:9.0.21-1.0.1.el9_8
C Authentication Bypass	<0:9.0.21-1.0.1.el9_8
C Allocation of Resources Without Limits or Throttling	<0:9.0.21-1.0.1.el9_8
C HTTP Request Smuggling	<0:9.0.21-1.0.1.el9_8
C Race Condition	<0:9.0.21-1.0.1.el9_8
C Uncontrolled Recursion	<0:9.0.21-1.0.1.el9_8
C Link Following	<0:9.0.21-1.0.1.el9_8
C Inclusion of Functionality from Untrusted Control Sphere	<0:9.0.21-1.0.1.el9_8
C Allocation of Resources Without Limits or Throttling	<0:9.0.21-1.0.1.el9_8
C Improperly Controlled Sequential Memory Allocation	<0:9.0.21-1.0.1.el9_8
H Origin Validation Error	<0:9.0.20-1.0.1.el9_8
H Arbitrary Code Injection	<0:9.0.20-1.0.1.el9_8
H Improper Cross-boundary Removal of Sensitive Data	<0:9.0.19-1.0.1.el9_8
H Unchecked Return Value	<0:9.0.19-1.0.1.el9_8
H HTTP Request Smuggling	<0:9.0.19-1.0.1.el9_8
H Unchecked Input for Loop Condition	<0:9.0.19-1.0.1.el9_8
H Deserialization of Untrusted Data	<0:9.0.18-1.0.1.el9_8
H Authentication Bypass	<0:9.0.18-1.0.1.el9_8
H Incorrect Implementation of Authentication Algorithm	<0:9.0.18-1.0.1.el9_8
H Arbitrary Code Injection	<0:9.0.18-1.0.1.el9_8
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el9_8
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el9_8
H Access of Resource Using Incompatible Type ('Type Confusion')	<0:9.0.18-1.0.1.el9_8
H Stack-based Buffer Overflow	<0:9.0.18-1.0.1.el9_8
H Deserialization of Untrusted Data	<0:9.0.18-1.0.1.el9_8
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el9_8
H Improper Encoding or Escaping of Output	<0:9.0.18-1.0.1.el9_8
H LDAP Injection	<0:9.0.18-1.0.1.el9_8
H Insufficient Verification of Data Authenticity	<0:9.0.18-1.0.1.el9_8
H Link Following	<0:9.0.18-1.0.1.el9_8
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el9_8
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el9_8
H Improper Validation of Specified Type of Input	<0:9.0.18-1.0.1.el9_8
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:9.0.17-1.0.1.el9_8
H Link Following	<0:9.0.17-1.0.1.el9_8
H Resource Exhaustion	<0:9.0.17-1.0.1.el9_8
H Improper Neutralization of Special Elements	<0:9.0.15-1.0.1.el9_7
H Resource Exhaustion	<0:9.0.15-1.0.1.el9_7
H Improper Input Validation	<0:9.0.15-1.0.1.el9_7
H Improper Input Validation	<0:9.0.15-1.0.1.el9_7
H Out-of-bounds Read	<0:9.0.14-1.0.1.el9_7
H Allocation of Resources Without Limits or Throttling	<0:9.0.14-1.0.1.el9_7
H Inadequate Encryption Strength	<0:9.0.10-1.0.1.el9_6
H Link Following	<0:9.0.10-1.0.1.el9_6
H HTTP Request Smuggling	<0:9.0.10-1.0.1.el9_6
H Untrusted Search Path	<0:9.0.6-1.0.1.el9_6
H External Control of File Name or Path	<0:9.0.5-1.0.1.el9_6
H CVE-2025-24070	<0:9.0.3-1.0.1.el9_5
H CVE-2024-43499	<0:9.0.0-1.0.1.el9_5
H CVE-2024-43498	<0:9.0.0-1.0.1.el9_5

Vulnerability

Vulnerable Version

Weak Password Recovery Mechanism for Forgotten Password

<0:9.0.21-1.0.1.el9_8