{"action":"Upgrade System.Text.Encodings.Web to 4.5.1 (4.5.x), 4.7.2 (4.7.x) or 5.0.1 (5.0.x) or later.","affected":[{"fixed":"4.5.1","introduced":"4.0.0"},{"fixed":"4.7.2","introduced":"4.6.0"},{"fixed":"5.0.1","introduced":"5.0.0"}],"component":"System.Text.Encodings.Web","cve_ids":["CVE-2021-26701"],"ecosystem":"NuGet","epss":0.30096,"exploited":false,"fixed_versions":["4.5.1","4.7.2","5.0.1"],"ghsa_id":"GHSA-ghhp-997w-qr28","id":"tcs_01M5N8P7ZAEDVKD13Q9PP4ZK6Y","modified_at":"2024-12-07T05:45:57.337833Z","published_at":"2021-04-21T19:38:01Z","references":["https://osv.dev/vulnerability/GHSA-ghhp-997w-qr28","https://nvd.nist.gov/vuln/detail/CVE-2021-26701","https://github.com/dotnet/announcements/issues/178","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2AZOUKMCHT2WBHR7MYDTYXWOBHZW5P5","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TW3ZSJTTMZAFKGW7NJWTVVFZUYYU2SJZ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBOSSX7U6BSHV5RI74FCOW4ITJ5RRJR5","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WA5WQJVHUL5C4XMJTLY3C67R4WP35EF4","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XPUKFHIGP5YNJRRFWKDJ2XRS4WTFJNNK","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YLFATXASXW4OV2ZBSRP4G55HJH73QPBP","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S2AZOUKMCHT2WBHR7MYDTYXWOBHZW5P5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TW3ZSJTTMZAFKGW7NJWTVVFZUYYU2SJZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UBOSSX7U6BSHV5RI74FCOW4ITJ5RRJR5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WA5WQJVHUL5C4XMJTLY3C67R4WP35EF4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XPUKFHIGP5YNJRRFWKDJ2XRS4WTFJNNK","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YLFATXASXW4OV2ZBSRP4G55HJH73QPBP","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26701"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-ghhp-997w-qr28","url":"https://osv.dev/vulnerability/GHSA-ghhp-997w-qr28"}],"summary":".NET Core Remote Code Execution Vulnerability"}