{"action":"Upgrade Microsoft.NET.Build.Containers to 7.0.307 or later.","affected":[{"fixed":"7.0.307","introduced":"0"}],"component":"Microsoft.NET.Build.Containers","cve_ids":["CVE-2023-35390"],"ecosystem":"NuGet","epss":0.0208,"exploited":false,"fixed_versions":["7.0.307"],"ghsa_id":"GHSA-p8rx-fwgq-rh2f","id":"tcs_01M5N8W1CFZVRK7E3X21AHDRTW","modified_at":"2024-06-03T18:49:12.674108Z","published_at":"2023-08-09T13:15:38Z","references":["https://osv.dev/vulnerability/GHSA-p8rx-fwgq-rh2f","https://github.com/dotnet/sdk/security/advisories/GHSA-p8rx-fwgq-rh2f","https://nvd.nist.gov/vuln/detail/CVE-2023-35390","https://github.com/dotnet/announcements/issues/266","https://github.com/dotnet/sdk","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CL2L4WE5QRT7WEXANYXSKSU43APC5N2V","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWVZFKTLNMNKPZ755EMRYIA6GHFOWGKY","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35390"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-p8rx-fwgq-rh2f","url":"https://osv.dev/vulnerability/GHSA-p8rx-fwgq-rh2f"}],"summary":".NET Remote Code Execution Vulnerability"}