Search for packages
| purl | pkg:nuget/System.Net.Http.WinHttpHandler@4.4.0-preview2-25405-01 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-axvm-3dh9-3kf6
Aliases: CVE-2017-0247 GHSA-6xh7-4v2w-36q6 |
Improper Input Validation A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package in ASP.NET Core Mvc allows remote attackers to cause a denial of service by leveraging failure to properly calculate the length of 4-byte characters in the Unicode Non-Character range. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||