Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/Microsoft.Owin@4.1.1
purl pkg:nuget/Microsoft.Owin@4.1.1
Next non-vulnerable version 4.2.2
Latest non-vulnerable version 4.2.2
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-m6bh-57h2-73a3
Aliases:
CVE-2022-29117
GHSA-3rq8-h3gj-r5c6
This advisory has been marked as False-Positive and removed.
4.2.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-n3cs-wjun-vfhe Cookie parsing failure A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded.The security update addresses the vulnerability by fixing the way the ASP.NET Core cookie parser handles encoded names., aka 'Microsoft ASP.NET Core Security Feature Bypass Vulnerability'. CVE-2020-1045
GHSA-hxrm-9w7p-39cc

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T22:08:02.489317+00:00 GitLab Importer Affected by VCID-m6bh-57h2-73a3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Microsoft.Owin/CVE-2022-29117.yml 38.4.0
2026-04-16T22:01:28.216596+00:00 GitLab Importer Fixing VCID-n3cs-wjun-vfhe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Microsoft.Owin/CVE-2020-1045.yml 38.4.0
2026-04-11T23:24:26.277706+00:00 GitLab Importer Affected by VCID-m6bh-57h2-73a3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Microsoft.Owin/CVE-2022-29117.yml 38.3.0
2026-04-11T23:17:04.229399+00:00 GitLab Importer Fixing VCID-n3cs-wjun-vfhe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Microsoft.Owin/CVE-2020-1045.yml 38.3.0
2026-04-04T14:32:43.781748+00:00 GHSA Importer Fixing VCID-n3cs-wjun-vfhe https://github.com/advisories/GHSA-hxrm-9w7p-39cc 38.1.0
2026-04-02T23:30:50.595495+00:00 GitLab Importer Affected by VCID-m6bh-57h2-73a3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Microsoft.Owin/CVE-2022-29117.yml 38.1.0
2026-04-02T23:24:50.581158+00:00 GitLab Importer Fixing VCID-n3cs-wjun-vfhe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Microsoft.Owin/CVE-2020-1045.yml 38.1.0
2026-04-01T17:52:23.223778+00:00 GitLab Importer Affected by VCID-m6bh-57h2-73a3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Microsoft.Owin/CVE-2022-29117.yml 38.0.0
2026-04-01T17:45:35.954097+00:00 GitLab Importer Fixing VCID-n3cs-wjun-vfhe https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Microsoft.Owin/CVE-2020-1045.yml 38.0.0
2026-04-01T13:09:19.420479+00:00 GithubOSV Importer Fixing VCID-n3cs-wjun-vfhe https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-hxrm-9w7p-39cc/GHSA-hxrm-9w7p-39cc.json 38.0.0