{"action":"Upgrade Bond.Core.CSharp to 9.0.1 or later.","affected":[{"fixed":"9.0.1","introduced":"3.0.0"}],"component":"Bond.Core.CSharp","cve_ids":["CVE-2020-1469"],"ecosystem":"NuGet","epss":0.04844,"exploited":false,"fixed_versions":["9.0.1"],"ghsa_id":"GHSA-rqrc-8q8f-cp9c","id":"tcs_01M5N90FEQDN0C91DT381E9YPD","modified_at":"2024-02-20T05:31:04.092839Z","published_at":"2022-04-08T18:11:51Z","references":["https://osv.dev/vulnerability/GHSA-rqrc-8q8f-cp9c","https://nvd.nist.gov/vuln/detail/CVE-2020-1469","https://github.com/microsoft/bond/commit/3afea822c42dd0095fedb9e7db9ebb99165e7343","https://github.com/microsoft/bond/commit/b0fd4a15a7cae946dd2855122559ca59cc34dbea","https://github.com/microsoft/bond","https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2020-1469","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1469","https://www.nuget.org/packages/Bond.Core.CSharp/9.0.1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rqrc-8q8f-cp9c","url":"https://osv.dev/vulnerability/GHSA-rqrc-8q8f-cp9c"}],"summary":"Infinite loop in .Net Bond"}