Lucene search

K
osvGoogleOSV:GHSA-242J-2GM6-5RWX
HistoryMay 24, 2022 - 5:38 p.m.

ASP.NET Core and Visual Studio Denial of Service Vulnerability

2022-05-2417:38:51
Google
osv.dev
8

0.002 Low

EPSS

Percentile

57.0%

A denial-of-service vulnerability exists in the way Kestrel parses HTTP/2 requests. The security update addresses the vulnerability by fixing the way the Kestrel parses HTTP/2 requests. Users are advised to upgrade.