{"action":"Upgrade Microsoft.AspNetCore.App.Runtime.win-x86 to 3.1.25 (3.x), 5.0.17 (5.x) or 6.0.5 (6.x) or later.","affected":[{"fixed":"3.1.25","introduced":"3.0.0"},{"fixed":"5.0.17","introduced":"5.0.0"},{"fixed":"6.0.5","introduced":"6.0.0"}],"component":"Microsoft.AspNetCore.App.Runtime.win-x86","cve_ids":["CVE-2022-29145"],"ecosystem":"NuGet","epss":0.05538,"exploited":false,"fixed_versions":["3.1.25","5.0.17","6.0.5"],"ghsa_id":"GHSA-fcg8-mg9g-6hc4","id":"tcs_01M5N8M9CS9CPH91VQBXPCYZ21","modified_at":"2026-06-08T23:45:22.578575507Z","published_at":"2022-08-30T19:35:52Z","references":["https://osv.dev/vulnerability/GHSA-fcg8-mg9g-6hc4","https://github.com/dotnet/aspnetcore/security/advisories/GHSA-fcg8-mg9g-6hc4","https://nvd.nist.gov/vuln/detail/CVE-2022-29145","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5FPEQ6BTYRGTS6IYCDTZW6YF5HLQ3BY","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W5FPEQ6BTYRGTS6IYCDTZW6YF5HLQ3BY","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29145","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29145"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fcg8-mg9g-6hc4#NuGet/Microsoft.AspNetCore.App.Runtime.win-x86","url":"https://osv.dev/vulnerability/GHSA-fcg8-mg9g-6hc4"}],"summary":".NET Denial of Service Vulnerability"}