{"action":"Upgrade System.Security.Cryptography.Xml to 4.4.2 or later.","affected":[{"fixed":"4.4.2","introduced":"0"}],"component":"System.Security.Cryptography.Xml","cve_ids":["CVE-2018-0764"],"ecosystem":"NuGet","epss":0.08885,"exploited":false,"fixed_versions":["4.4.2"],"ghsa_id":"GHSA-rr3c-f55v-qhv5","id":"tcs_01M5N90G2SHVV25KMTEKMX1ZVS","modified_at":"2024-12-02T05:51:59.374774Z","published_at":"2018-10-16T17:34:00Z","references":["https://osv.dev/vulnerability/GHSA-rr3c-f55v-qhv5","https://nvd.nist.gov/vuln/detail/CVE-2018-0764","https://access.redhat.com/errata/RHSA-2018:0379","https://github.com/advisories/GHSA-rr3c-f55v-qhv5","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0764","http://www.securityfocus.com/bid/102387","http://www.securitytracker.com/id/1040152"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rr3c-f55v-qhv5","url":"https://osv.dev/vulnerability/GHSA-rr3c-f55v-qhv5"}],"summary":"Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents"}