HIGH7.5
GHSA-4jxx-4qxw-prxm
Denial of service in ASP.NET Core
Quick fix
GHSA-4jxx-4qxw-prxm — Microsoft.AspNetCore.SignalR.Protocols.MessagePack: upgrade to the fixed version with the command below.
dotnet add package Microsoft.AspNetCore.SignalR.Protocols.MessagePack --version 1.1.5Details
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
Are you affected?
Enter the version of the package you're using.
Affected packages
NuGet/Microsoft.AspNetCore.SignalR.Protocols.MessagePack
Introduced in:
1.1.0Fixed in: 1.1.5Fix
dotnet add package Microsoft.AspNetCore.SignalR.Protocols.MessagePack --version 1.1.5NuGet/Microsoft.AspNetCore.SignalR.Protocols.MessagePack
Introduced in:
1.0.0Fixed in: 1.0.11Fix
dotnet add package Microsoft.AspNetCore.SignalR.Protocols.MessagePack --version 1.0.11