Search for packages
| purl | pkg:nuget/System.Text.Encodings.Web@4.4.0-preview1-25305-02 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-bd3c-1sg9-wfh2
Aliases: CVE-2021-26701 GHSA-ghhp-997w-qr28 |
.NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. ### Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 5.0, .NET Core 3.1, and .NET Core 2.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A remote code execution vulnerability exists in .NET 5 and .NET Core due to how text encoding is performed. ### Discussion Discussion for this issue can be found at dotnet/runtime#49377 ### Mitigation factors Microsoft has not identified any mitigating factors for this vulnerability. ### Affected software The vulnerable package is `System.Text.Encodings.Web` . Upgrading your package and redeploying your app should be sufficient to address this vulnerability. Vulnerable package versions: Any .NET 5, .NET Core, or .NET Framework based application that uses the System.Text.Encodings.Web package with a vulnerable version listed below. Package Name | Vulnerable Versions | Secure Versions -|-|- System.Text.Encodings.Web | 4.0.0 - 4.5.0 | 4.5.1 System.Text.Encodings.Web | 4.6.0-4.7.1 | 4.7.2 System.Text.Encodings.Web | 5.0.0 | 5.0.1 Please validate that each of the .NET versions you are using is in support. Security updates are only provided for supported .NET versions. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T21:21:29.782468+00:00 | GitLab Importer | Affected by | VCID-bd3c-1sg9-wfh2 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/System.Text.Encodings.Web/CVE-2021-26701.yml | 38.4.0 |
| 2026-04-11T22:33:58.492920+00:00 | GitLab Importer | Affected by | VCID-bd3c-1sg9-wfh2 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/System.Text.Encodings.Web/CVE-2021-26701.yml | 38.3.0 |
| 2026-04-02T22:45:04.304227+00:00 | GitLab Importer | Affected by | VCID-bd3c-1sg9-wfh2 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/System.Text.Encodings.Web/CVE-2021-26701.yml | 38.1.0 |
| 2026-04-01T17:03:02.474552+00:00 | GitLab Importer | Affected by | VCID-bd3c-1sg9-wfh2 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/System.Text.Encodings.Web/CVE-2021-26701.yml | 38.0.0 |