Lookup for vulnerable packages by Package URL.

Purlpkg:nuget/Microsoft.NETCore.App.Runtime.linux-x64@8.0.17
Typenuget
Namespace
NameMicrosoft.NETCore.App.Runtime.linux-x64
Version8.0.17
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version8.0.21
Latest_non_vulnerable_version10.0.4
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-dgvb-ea7n-9fby
vulnerability_id VCID-dgvb-ea7n-9fby
summary
Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0 and .NET 9.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

An attacker could exploit this vulnerability by placing files in particular locations, leading to unintended code execution.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-30399.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-30399.json
1
reference_url https://github.com/dotnet/runtime
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dotnet/runtime
2
reference_url https://github.com/dotnet/runtime/issues/116495
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dotnet/runtime/issues/116495
3
reference_url https://www.cve.org/CVERecord?id=CVE-2025-30399
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.cve.org/CVERecord?id=CVE-2025-30399
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2369701
reference_id 2369701
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2369701
5
reference_url https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30399
reference_id CVE-2025-30399
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30399
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-30399
reference_id CVE-2025-30399
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-30399
7
reference_url https://github.com/advisories/GHSA-266m-wp2v-x7mq
reference_id GHSA-266m-wp2v-x7mq
reference_type
scores
url https://github.com/advisories/GHSA-266m-wp2v-x7mq
8
reference_url https://github.com/dotnet/runtime/security/advisories/GHSA-266m-wp2v-x7mq
reference_id GHSA-266m-wp2v-x7mq
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/dotnet/runtime/security/advisories/GHSA-266m-wp2v-x7mq
9
reference_url https://access.redhat.com/errata/RHSA-2025:8812
reference_id RHSA-2025:8812
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8812
10
reference_url https://access.redhat.com/errata/RHSA-2025:8813
reference_id RHSA-2025:8813
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8813
11
reference_url https://access.redhat.com/errata/RHSA-2025:8814
reference_id RHSA-2025:8814
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8814
12
reference_url https://access.redhat.com/errata/RHSA-2025:8815
reference_id RHSA-2025:8815
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8815
13
reference_url https://access.redhat.com/errata/RHSA-2025:8816
reference_id RHSA-2025:8816
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8816
14
reference_url https://access.redhat.com/errata/RHSA-2025:8817
reference_id RHSA-2025:8817
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8817
15
reference_url https://access.redhat.com/errata/RHSA-2025:9066
reference_id RHSA-2025:9066
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:9066
fixed_packages
0
url pkg:nuget/Microsoft.NETCore.App.Runtime.linux-x64@8.0.17
purl pkg:nuget/Microsoft.NETCore.App.Runtime.linux-x64@8.0.17
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.linux-x64@8.0.17
1
url pkg:nuget/Microsoft.NETCore.App.Runtime.linux-x64@9.0.6
purl pkg:nuget/Microsoft.NETCore.App.Runtime.linux-x64@9.0.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.linux-x64@9.0.6
aliases CVE-2025-30399, GHSA-266m-wp2v-x7mq
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dgvb-ea7n-9fby
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.NETCore.App.Runtime.linux-x64@8.0.17