{"action":"Upgrade System.Net.Requests to 6.0.25 (6.x), 7.0.14 (7.x) or 8.0.0 (8.x) or later.","affected":[{"fixed":"8.0.0","introduced":"8.0.0-rc.2.23480.2"},{"fixed":"6.0.25","introduced":"6.0.0"},{"fixed":"7.0.14","introduced":"7.0.0"}],"component":"System.Net.Requests","cve_ids":["CVE-2023-36049"],"ecosystem":"NuGet","epss":0.0679,"exploited":false,"fixed_versions":["8.0.0","6.0.25","7.0.14"],"ghsa_id":"GHSA-c3hf-8vgx-72rh","id":"tcs_01M5N8HNCKW1MR796Z4KHD0KW6","modified_at":"2023-11-22T08:11:24.148195Z","published_at":"2023-11-14T20:39:33Z","references":["https://osv.dev/vulnerability/GHSA-c3hf-8vgx-72rh","https://github.com/dotnet/runtime/security/advisories/GHSA-c3hf-8vgx-72rh","https://nvd.nist.gov/vuln/detail/CVE-2023-36049","https://github.com/dotnet/announcements/issues/287","https://github.com/dotnet/runtime","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36049"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-c3hf-8vgx-72rh","url":"https://osv.dev/vulnerability/GHSA-c3hf-8vgx-72rh"}],"summary":"Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability"}