{"action":"Upgrade Microsoft.AspNetCore.App.Runtime.osx-x64 to 3.1.29 (3.x) or 6.0.9 (6.x) or later.","affected":[{"fixed":"3.1.29","introduced":"3.1.0"},{"fixed":"6.0.9","introduced":"5.0.0"}],"component":"Microsoft.AspNetCore.App.Runtime.osx-x64","cve_ids":["CVE-2022-38013"],"ecosystem":"NuGet","epss":0.04039,"exploited":false,"fixed_versions":["3.1.29","6.0.9"],"ghsa_id":"GHSA-r8m2-4x37-6592","id":"tcs_01M5N8ZPXB86NC0HSRE99RHE59","modified_at":"2026-06-08T23:45:21.130432835Z","published_at":"2022-09-15T03:25:36Z","references":["https://osv.dev/vulnerability/GHSA-r8m2-4x37-6592","https://github.com/dotnet/aspnetcore/security/advisories/GHSA-r8m2-4x37-6592","https://nvd.nist.gov/vuln/detail/CVE-2022-38013","https://github.com/dotnet/aspnetcore","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2CUL3Z7MEED7RFQZVGQL2MTKSFFZKAAY","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7HCV4TQGOTOFHO5ETRKGFKAGYV2YAUVE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JA6F4CDKLI3MALV6UK3P2DR5AGCLTT7Y","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K4K5YL7USOKIR3O2DUKBZMYPWXYPDKXG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WL334CKOHA6BQQSYJW365HIWJ4IOE45M","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38013","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38013"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-r8m2-4x37-6592#NuGet/Microsoft.AspNetCore.App.Runtime.osx-x64","url":"https://osv.dev/vulnerability/GHSA-r8m2-4x37-6592"}],"summary":".NET Denial of Service Vulnerability"}