{"action":"Upgrade Microsoft.AspNetCore.Authentication.JwtBearer to 2.1.29 (2.x), 3.1.18 (3.x) or 5.0.9 (5.x) or later.","affected":[{"fixed":"2.1.29","introduced":"2.1.0"},{"fixed":"3.1.18","introduced":"3.0.0"},{"fixed":"5.0.9","introduced":"5.0.0"}],"component":"Microsoft.AspNetCore.Authentication.JwtBearer","cve_ids":["CVE-2021-34532"],"ecosystem":"NuGet","epss":0.01219,"exploited":false,"fixed_versions":["2.1.29","3.1.18","5.0.9"],"ghsa_id":"GHSA-q7cg-43mg-qp69","id":"tcs_01M5N8XN4EJ14CK1Z5WZRE3PYJ","modified_at":"2026-08-11T17:30:08.805369532Z","published_at":"2021-08-25T14:45:28Z","references":["https://osv.dev/vulnerability/GHSA-q7cg-43mg-qp69","https://github.com/dotnet/aspnetcore/security/advisories/GHSA-q7cg-43mg-qp69","https://nvd.nist.gov/vuln/detail/CVE-2021-34532","https://github.com/dotnet/aspnetcore","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34532","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34532"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-q7cg-43mg-qp69","url":"https://osv.dev/vulnerability/GHSA-q7cg-43mg-qp69"}],"summary":"ASP.NET Core Information Disclosure Vulnerability"}