{"action":"Upgrade Yarp.ReverseProxy to 1.1.2 (1.x) or 2.0.1 (2.x) or later.","affected":[{"fixed":"1.1.2","introduced":"0"},{"fixed":"2.0.1","introduced":"2.0.0"}],"component":"Yarp.ReverseProxy","cve_ids":["CVE-2023-33141"],"ecosystem":"NuGet","epss":0.0222,"exploited":false,"fixed_versions":["1.1.2","2.0.1"],"ghsa_id":"GHSA-jrjw-qgr2-wfcg","id":"tcs_01M5N8SYZQGV8JRAFC9T7DA36F","modified_at":"2024-06-03T18:49:04.003006Z","published_at":"2023-06-23T21:37:26Z","references":["https://osv.dev/vulnerability/GHSA-jrjw-qgr2-wfcg","https://github.com/microsoft/reverse-proxy/security/advisories/GHSA-jrjw-qgr2-wfcg","https://nvd.nist.gov/vuln/detail/CVE-2023-33141","https://github.com/microsoft/reverse-proxy","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33141","https://www.nuget.org/packages/Yarp.ReverseProxy/1.1.2","https://www.nuget.org/packages/Yarp.ReverseProxy/2.0.1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jrjw-qgr2-wfcg","url":"https://osv.dev/vulnerability/GHSA-jrjw-qgr2-wfcg"}],"summary":"YARP Denial of Service Vulnerability"}