YARP Denial of Service Vulnerability
### Impact
A denial of service vulnerability exists in YARP.
### Patches
If you're using YARP 1.x, you should update to NuGet package version 1.1.2
https://www.nuget.org/packages/Yarp.ReverseProxy/1.1.2.
If you're using YARP 2.0.0, you should update to NuGet package version 2.0.1
https://www.nuget.org/packages/Yarp.ReverseProxy/2.0.1.
You can do so by updating the `PackageReference` in your `.csproj` file
```diff
<ItemGroup>
- <PackageReference Include="Yarp.ReverseProxy" Version="2.0.0" />
- <PackageReference Include="Yarp.Telemetry.Consumption" Version="2.0.0" />
+ <PackageReference Include="Yarp.ReverseProxy" Version="2.0.1" />
+ <PackageReference Include="Yarp.Telemetry.Consumption" Version="2.0.1" />
</ItemGroup>
```
or by selecting `2.0.1` in the NuGet UI inside Visual Studio (`Manage NuGet Packages` / `Updates`)
### References
CVE-2023-33141
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33141