dotnet-hostfxr-9.0

Direct Vulnerabilities

Known vulnerabilities in the dotnet-hostfxr-9.0 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
C Improperly Controlled Sequential Memory Allocation	<0:9.0.21-1.0.1.el9_8
C Uncontrolled Recursion	<0:9.0.21-1.0.1.el9_8
C HTTP Request Smuggling	<0:9.0.21-1.0.1.el9_8
C Origin Validation Error	<0:9.0.21-1.0.1.el9_8
C Cross-site Scripting (XSS)	<0:9.0.21-1.0.1.el9_8
C Allocation of Resources Without Limits or Throttling	<0:9.0.21-1.0.1.el9_8
C Race Condition	<0:9.0.21-1.0.1.el9_8
C Weak Password Recovery Mechanism for Forgotten Password	<0:9.0.21-1.0.1.el9_8
C Algorithmic Complexity	<0:9.0.21-1.0.1.el9_8
C HTTP Request Smuggling	<0:9.0.21-1.0.1.el9_8
C Allocation of Resources Without Limits or Throttling	<0:9.0.21-1.0.1.el9_8
C Out-of-bounds Write	<0:9.0.21-1.0.1.el9_8
C Link Following	<0:9.0.21-1.0.1.el9_8
C Authentication Bypass	<0:9.0.21-1.0.1.el9_8
C Algorithmic Complexity	<0:9.0.21-1.0.1.el9_8
C Link Following	<0:9.0.21-1.0.1.el9_8
C Inclusion of Functionality from Untrusted Control Sphere	<0:9.0.21-1.0.1.el9_8
C Information Exposure	<0:9.0.21-1.0.1.el9_8
C Allocation of Resources Without Limits or Throttling	<0:9.0.21-1.0.1.el9_8
C Deadlock	<0:9.0.21-1.0.1.el9_8
H Origin Validation Error	<0:9.0.20-1.0.1.el9_8
H Arbitrary Code Injection	<0:9.0.20-1.0.1.el9_8
H Unchecked Return Value	<0:9.0.19-1.0.1.el9_8
H Unchecked Input for Loop Condition	<0:9.0.19-1.0.1.el9_8
H HTTP Request Smuggling	<0:9.0.19-1.0.1.el9_8
H Improper Cross-boundary Removal of Sensitive Data	<0:9.0.19-1.0.1.el9_8
H Improper Encoding or Escaping of Output	<0:9.0.18-1.0.1.el9_8
H Authentication Bypass	<0:9.0.18-1.0.1.el9_8
H Insufficient Verification of Data Authenticity	<0:9.0.18-1.0.1.el9_8
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el9_8
H Incorrect Implementation of Authentication Algorithm	<0:9.0.18-1.0.1.el9_8
H Deserialization of Untrusted Data	<0:9.0.18-1.0.1.el9_8
H LDAP Injection	<0:9.0.18-1.0.1.el9_8
H Link Following	<0:9.0.18-1.0.1.el9_8
H Access of Resource Using Incompatible Type ('Type Confusion')	<0:9.0.18-1.0.1.el9_8
H Deserialization of Untrusted Data	<0:9.0.18-1.0.1.el9_8
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el9_8
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el9_8
H Stack-based Buffer Overflow	<0:9.0.18-1.0.1.el9_8
H Arbitrary Code Injection	<0:9.0.18-1.0.1.el9_8
H Improper Validation of Specified Type of Input	<0:9.0.18-1.0.1.el9_8
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el9_8
H Allocation of Resources Without Limits or Throttling	<0:9.0.18-1.0.1.el9_8
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:9.0.17-1.0.1.el9_8
H Resource Exhaustion	<0:9.0.17-1.0.1.el9_8
H Link Following	<0:9.0.17-1.0.1.el9_8
H Improper Neutralization of Special Elements	<0:9.0.15-1.0.1.el9_7
H Resource Exhaustion	<0:9.0.15-1.0.1.el9_7
H Improper Input Validation	<0:9.0.15-1.0.1.el9_7
H Improper Input Validation	<0:9.0.15-1.0.1.el9_7
H Allocation of Resources Without Limits or Throttling	<0:9.0.14-1.0.1.el9_7
H Out-of-bounds Read	<0:9.0.14-1.0.1.el9_7
H HTTP Request Smuggling	<0:9.0.10-1.0.1.el9_6
H Inadequate Encryption Strength	<0:9.0.10-1.0.1.el9_6
H Link Following	<0:9.0.10-1.0.1.el9_6
H Untrusted Search Path	<0:9.0.6-1.0.1.el9_6
H External Control of File Name or Path	<0:9.0.5-1.0.1.el9_6
H CVE-2025-24070	<0:9.0.3-1.0.1.el9_5
H CVE-2024-43498	<0:9.0.0-1.0.1.el9_5
H CVE-2024-43499	<0:9.0.0-1.0.1.el9_5

Vulnerability

Vulnerable Version

Improperly Controlled Sequential Memory Allocation

<0:9.0.21-1.0.1.el9_8