{"action":"Upgrade System.Security.Cryptography.Xml to 4.7.1 (4.x) or 6.0.1 (6.x) or later.","affected":[{"fixed":"4.7.1","introduced":"0"},{"fixed":"6.0.1","introduced":"5.0.0"}],"component":"System.Security.Cryptography.Xml","cve_ids":["CVE-2022-34716"],"ecosystem":"NuGet","epss":0.02498,"exploited":false,"fixed_versions":["4.7.1","6.0.1"],"ghsa_id":"GHSA-vh55-786g-wjwj","id":"tcs_01M5N91Y0DZF77ZQ3GY3V46MMB","modified_at":"2025-09-04T18:27:29.192842Z","published_at":"2024-02-03T00:47:54Z","references":["https://osv.dev/vulnerability/GHSA-vh55-786g-wjwj","https://github.com/dotnet/aspnetcore/security/advisories/GHSA-vh55-786g-wjwj","https://nvd.nist.gov/vuln/detail/CVE-2022-34716","https://github.com/dotnet/announcements/issues/232","https://github.com/dotnet/aspnetcore/issues/43166","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34716","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-34716"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-vh55-786g-wjwj","url":"https://osv.dev/vulnerability/GHSA-vh55-786g-wjwj"}],"summary":".NET Information Disclosure Vulnerability"}