Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/dotnet-sdk@3.1.8.sdk108-1
purl pkg:alpm/archlinux/dotnet-sdk@3.1.8.sdk108-1
Next non-vulnerable version 5.0.4.sdk104-1
Latest non-vulnerable version 6.0.0.sdk100-1
Risk 4.5
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-1uqg-c7j6-wkag
Aliases:
CVE-2021-24112
GHSA-rxg9-xrhp-64gj
.NET Core Remote Code Execution Vulnerability A remote code execution vulnerability exists when parsing certain types of graphics files. This vulnerability only exists on systems running on MacOS or Linux. This CVE ID is unique from CVE-2021-26701.
5.0.3.sdk103-2
Affected by 1 other vulnerability.
VCID-757k-8968-xkbx
Aliases:
CVE-2021-1721
GHSA-3gp9-h8hw-pxpw
Denial of service in .NET core .NET Core and Visual Studio Denial of Service Vulnerability due to a vulnerability which exists when creating HTTPS web request during X509 certificate chain building.
5.0.3.sdk103-2
Affected by 1 other vulnerability.
VCID-nx74-pj4e-4fde
Aliases:
CVE-2021-1723
GHSA-242j-2gm6-5rwx
ASP.NET Core and Visual Studio Denial of Service Vulnerability A denial-of-service vulnerability exists in the way Kestrel parses HTTP/2 requests. The security update addresses the vulnerability by fixing the way the Kestrel parses HTTP/2 requests. Users are advised to upgrade.
5.0.3.sdk103-2
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-12T21:11:11.690498+00:00 Arch Linux Importer Affected by VCID-757k-8968-xkbx https://security.archlinux.org/AVG-1449 38.3.0
2026-04-12T21:11:11.665483+00:00 Arch Linux Importer Affected by VCID-nx74-pj4e-4fde https://security.archlinux.org/AVG-1449 38.3.0
2026-04-12T21:11:11.640462+00:00 Arch Linux Importer Affected by VCID-1uqg-c7j6-wkag https://security.archlinux.org/AVG-1449 38.3.0