dotnet-hostfxr-9.0

Direct Vulnerabilities

Known vulnerabilities in the dotnet-hostfxr-9.0 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • C
HTTP Request Smuggling

<0:9.0.21-1.0.1.el10_2
  • C
Link Following

<0:9.0.21-1.0.1.el10_2
  • C
Cross-site Scripting (XSS)

<0:9.0.21-1.0.1.el10_2
  • C
Inclusion of Functionality from Untrusted Control Sphere

<0:9.0.21-1.0.1.el10_2
  • C
HTTP Request Smuggling

<0:9.0.21-1.0.1.el10_2
  • C
Allocation of Resources Without Limits or Throttling

<0:9.0.21-1.0.1.el10_2
  • C
Algorithmic Complexity

<0:9.0.21-1.0.1.el10_2
  • C
Information Exposure

<0:9.0.21-1.0.1.el10_2
  • C
Uncontrolled Recursion

<0:9.0.21-1.0.1.el10_2
  • C
Out-of-bounds Write

<0:9.0.21-1.0.1.el10_2
  • C
Authentication Bypass

<0:9.0.21-1.0.1.el10_2
  • C
Improperly Controlled Sequential Memory Allocation

<0:9.0.21-1.0.1.el10_2
  • C
Algorithmic Complexity

<0:9.0.21-1.0.1.el10_2
  • C
Weak Password Recovery Mechanism for Forgotten Password

<0:9.0.21-1.0.1.el10_2
  • C
Race Condition

<0:9.0.21-1.0.1.el10_2
  • C
Allocation of Resources Without Limits or Throttling

<0:9.0.21-1.0.1.el10_2
  • C
Origin Validation Error

<0:9.0.21-1.0.1.el10_2
  • C
Deadlock

<0:9.0.21-1.0.1.el10_2
  • C
Allocation of Resources Without Limits or Throttling

<0:9.0.21-1.0.1.el10_2
  • C
Link Following

<0:9.0.21-1.0.1.el10_2
  • H
Arbitrary Code Injection

<0:9.0.20-1.0.1.el10_2
  • H
Origin Validation Error

<0:9.0.20-1.0.1.el10_2
  • H
HTTP Request Smuggling

<0:9.0.19-1.0.1.el10_2
  • H
Unchecked Input for Loop Condition

<0:9.0.19-1.0.1.el10_2
  • H
Improper Cross-boundary Removal of Sensitive Data

<0:9.0.19-1.0.1.el10_2
  • H
Unchecked Return Value

<0:9.0.19-1.0.1.el10_2
  • H
Authentication Bypass

<0:9.0.18-1.0.1.el10_2
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:9.0.18-1.0.1.el10_2
  • H
Allocation of Resources Without Limits or Throttling

<0:9.0.18-1.0.1.el10_2
  • H
Allocation of Resources Without Limits or Throttling

<0:9.0.18-1.0.1.el10_2
  • H
Stack-based Buffer Overflow

<0:9.0.18-1.0.1.el10_2
  • H
Link Following

<0:9.0.18-1.0.1.el10_2
  • H
Improper Validation of Specified Type of Input

<0:9.0.18-1.0.1.el10_2
  • H
Incorrect Implementation of Authentication Algorithm

<0:9.0.18-1.0.1.el10_2
  • H
Allocation of Resources Without Limits or Throttling

<0:9.0.18-1.0.1.el10_2
  • H
Arbitrary Code Injection

<0:9.0.18-1.0.1.el10_2
  • H
Deserialization of Untrusted Data

<0:9.0.18-1.0.1.el10_2
  • H
Deserialization of Untrusted Data

<0:9.0.18-1.0.1.el10_2
  • H
Improper Encoding or Escaping of Output

<0:9.0.18-1.0.1.el10_2
  • H
Insufficient Verification of Data Authenticity

<0:9.0.18-1.0.1.el10_2
  • H
Allocation of Resources Without Limits or Throttling

<0:9.0.18-1.0.1.el10_2
  • H
LDAP Injection

<0:9.0.18-1.0.1.el10_2
  • H
Resource Exhaustion

<0:9.0.17-1.0.1.el10_2
  • H
Link Following

<0:9.0.17-1.0.1.el10_2
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<0:9.0.17-1.0.1.el10_2
  • H
Improper Input Validation

<0:9.0.15-1.0.1.el10_1
  • H
Resource Exhaustion

<0:9.0.15-1.0.1.el10_1
  • H
Improper Input Validation

<0:9.0.15-1.0.1.el10_1
  • H
Improper Neutralization of Special Elements

<0:9.0.15-1.0.1.el10_1
  • H
Allocation of Resources Without Limits or Throttling

<0:9.0.14-1.0.1.el10_1
  • H
Out-of-bounds Read

<0:9.0.14-1.0.1.el10_1
  • H
Inadequate Encryption Strength

<0:9.0.10-1.0.1.el10_0
  • H
Link Following

<0:9.0.10-1.0.1.el10_0
  • H
HTTP Request Smuggling

<0:9.0.10-1.0.1.el10_0
  • H
Untrusted Search Path

<0:9.0.6-1.0.1.el10_0
  • H
External Control of File Name or Path

<0:9.0.6-1.0.1.el10_0