{"action":"Upgrade System.Drawing.Common to 4.7.2 (4.x) or 5.0.3 (5.x) or later.","affected":[{"fixed":"4.7.2","introduced":"4.0.0"},{"fixed":"5.0.3","introduced":"5.0.0"}],"component":"System.Drawing.Common","cve_ids":["CVE-2021-24112"],"ecosystem":"NuGet","epss":0.03454,"exploited":false,"fixed_versions":["4.7.2","5.0.3"],"ghsa_id":"GHSA-rxg9-xrhp-64gj","id":"tcs_01M5N90TZXJW121GNGAQ5MK6EE","modified_at":"2024-11-29T05:26:26.867037Z","published_at":"2022-05-24T17:43:19Z","references":["https://osv.dev/vulnerability/GHSA-rxg9-xrhp-64gj","https://nvd.nist.gov/vuln/detail/CVE-2021-24112","https://github.com/dotnet/announcements/issues/176","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24112"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-rxg9-xrhp-64gj","url":"https://osv.dev/vulnerability/GHSA-rxg9-xrhp-64gj"}],"summary":".NET Core Remote Code Execution Vulnerability"}