NuGet/Microsoft.Build.Tasks.Core CVE-2025-55247: high 7.3
Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability
Action: Upgrade Microsoft.Build.Tasks.Core to 17.8.43 (17.8.x), 17.10.46 (17.10.x), 17.11.48 (17.11.x), 17.12.50 (17.12.x), 17.14.28 (17.14.x) or 18.0.0-preview-25476-107 (18.0.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 17.15.0-preview-25277-114 | 18.0.0-preview-25476-107 | - |
| 17.14.0 | 17.14.28 | - |
| 17.12.0 | 17.12.50 | - |
| 17.11.0 | 17.11.48 | - |
| 17.10.0 | 17.10.46 | - |
| 17.8.0 | 17.8.43 | - |
Fixed versions
| 18.0.0-preview-25476-107 | 17.14.28 | 17.12.50 | 17.11.48 | 17.10.46 | 17.8.43 |
Sources
- osv: GHSA-w3q9-fxm7-j8fq
- https://github.com/dotnet/msbuild/security/advisories/GHSA-w3q9-fxm7-j8fq
- https://nvd.nist.gov/vuln/detail/CVE-2025-55247
- https://github.com/dotnet/msbuild
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55247
CVE-2025-55247 · published · modified · JSON