{"action":"Upgrade Microsoft.Net.Http.Server to 1.0.6 (1.0.x) or 1.1.4 (1.1.x) or later.","affected":[{"fixed":"1.0.6","introduced":"1.0.0"},{"fixed":"1.1.4","introduced":"1.1.0"}],"component":"Microsoft.Net.Http.Server","cve_ids":["CVE-2017-11883"],"ecosystem":"NuGet","epss":0.08526,"exploited":false,"fixed_versions":["1.0.6","1.1.4"],"ghsa_id":"GHSA-f9jc-rrm2-pmfg","id":"tcs_01M5N8M8NDQ5D4VB8F83KN3VZW","modified_at":"2024-12-05T05:43:34.145995Z","published_at":"2022-05-13T01:42:35Z","references":["https://osv.dev/vulnerability/GHSA-f9jc-rrm2-pmfg","https://nvd.nist.gov/vuln/detail/CVE-2017-11883","https://github.com/aspnet/Announcements/issues/278","https://github.com/github/advisory-database/issues/302","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11883"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-f9jc-rrm2-pmfg#NuGet/Microsoft.Net.Http.Server","url":"https://osv.dev/vulnerability/GHSA-f9jc-rrm2-pmfg"}],"summary":"Denial of service in ASP.NET Core"}