An open API service providing security vulnerability metadata for many open source software ecosystems.

Browse Security Advisories

High Security Advisories for System.Net.Http.WinHttpHandler in nuget Clear Filters

High
almost 7 years ago

ASP.NET Core fails to properly validate web requests MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ4aDctNHYydy0zNnE2

nuget System.Net.Http.WinHttpHandler, Microsoft.AspNetCore.Mvc.WebApiCompatShim, Microsoft.AspNetCore.Mvc.ViewFeatures, Microsoft.AspNetCore.Mvc.TagHelpers, Microsoft.AspNetCore.Mvc.Razor, Microsoft.AspNetCore.Mvc.Razor.Host, Microsoft.AspNetCore.Mvc.Localization, Microsoft.AspNetCore.Mvc.Formatters.Xml, Microsoft.AspNetCore.Mvc.Formatters.Json, Microsoft.AspNetCore.Mvc.DataAnnotations, Microsoft.AspNetCore.Mvc.Cors, Microsoft.AspNetCore.Mvc.ApiExplorer, Microsoft.AspNetCore.Mvc.Abstractions, System.Net.WebSockets.Client, System.Net.Security, System.Text.Encodings.Web, System.Net.Http, Microsoft.AspNetCore.Mvc.Core, Microsoft.AspNetCore.Mvc
High
almost 7 years ago

High severity vulnerability that affects Microsoft.AspNetCore.Mvc MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFocWYtZ2hnaC14Mm00

nuget DisCatSharp, Microsoft.AspNetCore.Mvc.WebApiCompatShim, Microsoft.AspNetCore.Mvc.ViewFeatures, Microsoft.AspNetCore.Mvc.TagHelpers, Microsoft.AspNetCore.Mvc.Razor, Microsoft.AspNetCore.Mvc.Razor.Host, Microsoft.AspNetCore.Mvc.Localization, Microsoft.AspNetCore.Mvc.Formatters.Xml, Microsoft.AspNetCore.Mvc.Formatters.Json, Microsoft.AspNetCore.Mvc.DataAnnotations, Microsoft.AspNetCore.Mvc.Cors, Microsoft.AspNetCore.Mvc.ApiExplorer, Microsoft.AspNetCore.Mvc.Abstractions, System.Net.WebSockets.Client, System.Net.Security, System.Net.Http.WinHttpHandler, System.Text.Encodings.Web, System.Net.Http, Microsoft.AspNetCore.Mvc.Core, Microsoft.AspNetCore.Mvc

Filter by Severity

Filter by Ecosystem

Filter by Package

Microsoft.ChakraCore 234 Microsoft.AspNetCore.App.Runtime.win-x64 17 Microsoft.AspNetCore.App.Runtime.win-x86 17 Microsoft.AspNetCore.App.Runtime.win-arm 16 Microsoft.AspNetCore.App.Runtime.win-arm64 15 Microsoft.AspNetCore.App.Runtime.linux-arm 14 Microsoft.NetCore.App.Runtime.win-arm 14 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 14 Microsoft.AspNetCore.App.Runtime.linux-arm64 14 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 14 Microsoft.NetCore.App.Runtime.win-arm64 14 Microsoft.AspNetCore.App.Runtime.osx-x64 14 Microsoft.NetCore.App.Runtime.win-x64 14 Microsoft.NetCore.App.Runtime.win-x86 14 Microsoft.AspNetCore.App.Runtime.linux-x64 14 Microsoft.AspNetCore.App.Runtime.linux-musl-arm 10 Microsoft.NetCore.App.Runtime.linux-x64 9 Microsoft.NetCore.App.Runtime.linux-musl-arm 9 Microsoft.NetCore.App.Runtime.osx-x64 9 Microsoft.NetCore.App.Runtime.osx-arm64 9 Microsoft.NetCore.App.Runtime.linux-arm 9 Microsoft.NetCore.App.Runtime.linux-musl-arm64 9 Microsoft.NetCore.App.Runtime.linux-arm64 9 Microsoft.NetCore.App.Runtime.linux-musl-x64 9 Microsoft.AspNetCore.App.Runtime.osx-arm64 8 Microsoft.NETCore.App.Runtime.win-x86 8 Microsoft.NETCore.App.Runtime.win-arm64 8 Microsoft.NETCore.App.Runtime.win-x64 8 DotNetNuke.Core 7 OPCFoundation.NetStandard.Opc.Ua.Core 7 Microsoft.AspNetCore.All 6 Microsoft.NETCore.App 6 Microsoft.WindowsDesktop.App.Runtime.win-x64 5 CefSharp.Wpf.HwndHost 5 CefSharp.Wpf 5 Microsoft.AspNetCore.App 5 CefSharp.WinForms 5 CefSharp.Common 5 Microsoft.WindowsDesktop.App.Runtime.win-x86 5 Microsoft.NETCore.App.Runtime.linux-x64 4 Microsoft.NETCore.App.Runtime.osx-x64 4 Microsoft.AspNetCore.Mvc.Core 4 Microsoft.NETCore.App.Runtime.linux-musl-x64 4 Microsoft.NETCore.App.Runtime.linux-musl-arm64 4 Microsoft.NETCore.App.Runtime.linux-arm64 4 Microsoft.NETCore.App.Runtime.win-arm 4 Microsoft.WindowsDesktop.App.Runtime.win-arm64 4 Microsoft.NETCore.App.Runtime.linux-arm 4 Microsoft.AspNetCore.Server.Kestrel.Core 3 SixLabors.ImageSharp 3 wix 3 Microsoft.AspNetCore.Mvc.Cors 3 System.Net.Http 3 Microsoft.Native.Quic.MsQuic.Schannel 3 Microsoft.NETCore.App.Runtime.rhel.6-x64 3 Microsoft.AspNetCore.Identity 3 Microsoft.Native.Quic.MsQuic.OpenSSL 3 PeterO.Cbor 2 NuGet.Commands 2 CefSharp.OffScreen 2 System.Text.Json 2 Umbraco.Cms.Core 2 Yarp.ReverseProxy 2 Microsoft.AspNetCore.Mvc.WebApiCompatShim 2 Google.Protobuf 2 System.Net.Security 2 Microsoft.AspNetCore.Mvc.TagHelpers 2 Microsoft.AspNetCore.Mvc.ApiExplorer 2 PanelSwWix4.Sdk 2 protobuf 2 System.Security.Cryptography.Xml 2 Microsoft.AspNetCore.Mvc.ViewFeatures 2 CefSharp.Common.NETCore 2 System.Text.Encodings.Web 2 Microsoft.AspNetCore.Mvc.Formatters.Xml 2 NuGet.CommandLine 2 OPCFoundation.NetStandard.Opc.Ua 2 Sustainsys.Saml2 2 Microsoft.AspNetCore.Mvc.Razor 2 System.IO.Packaging 2 google/protobuf 2 Moment.js 2 PanelSW.Custom.WiX 2 Microsoft.AspNetCore.Mvc.Razor.Host 2 Microsoft.AspNetCore.Mvc.Localization 2 Microsoft.AspNetCore.Mvc.Abstractions 2 Umbraco.CMS 2 NuGet.Protocol 2 Microsoft.AspNetCore.Mvc.Formatters.Json 2 moment 2 System.Net.Http.WinHttpHandler 2 Microsoft.AspNetCore.Mvc 2 DNN.PLATFORM 2 Microsoft.NETCore.App.Runtime.linux-musl-arm 2 System.Private.Uri 2 github.com/protocolbuffers/protobuf 2 Microsoft.AspNetCore.Mvc.DataAnnotations 2 System.Net.WebSockets.Client 2 Microsoft.Owin 2 Magick.NET-Q8-arm64 1 set-value 1 Magick.NET-Q8-AnyCPU 1 Imageflow.NativeTool.ubuntu_18_04-x86_64 1 Microsoft.Bot.Connector 1 DotNetZip 1 starkbank-ecdsa 1 MimeKit 1 Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64 1 Magick.NET-Q16-x86 1 Oqtane.Server 1 Microsoft.Build.NuGetSdkResolver 1 Magick.NET-Q16-HDRI-OpenMP-x64 1 Imageflow.NativeRuntime.win-x86 1 System.Security.Cryptography.Pkcs 1 Microsoft.NETCore.App.Runtime.Mono.linux-arm 1 webp 1 Microsoft.NETCore.App.Runtime.Mono.osx-x64 1 System.Management.Automation 1 CefSharp.Wpf.NetCore 1 UmbracoForms 1 Newtonsoft.Json 1 DotVVM 1 YamlDotNet 1 libwebp-sys2 1 Microsoft.AspNetCore.Http.Connections 1 Snappier 1 Microsoft.Data.OData 1 CefSharp.WinForms.NETCore 1 System.ServiceModel.Duplex 1 Microsoft.Azure.Storage.DataMovement 1 Azure.Identity 1 magick.net-q16-hdri-anycpu 1 com.google.protobuf:protobuf-java 1 Tgstation.Server.Host 1 System.ServiceModel.Http 1 Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64 1 Imageflow.NativeTool.ubuntu-x86_64 1 Microsoft.AspNetCore.DataProtection.AzureStorage 1 NuGet.PackageManagement 1 Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64 1 Apache.Avro 1 Microsoft.AspNetCore.Server.WebListener 1 Microsoft.AspNetCore.HttpOverrides 1 Hangfire.Core 1 System.Security.Cryptography.X509Certificates 1 UmbracoCMS.Core 1 RestSharp 1 set-value-nuget 1 MetadataExtractor 1 CefSharp.Wpf.NETCore 1 System.Net.Requests 1 elFinder.Net.Core 1 System.Private.ServiceModel 1 libwebp-sys 1 Amazon.IonDotnet 1 Oqtane.Framework 1 Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 1 dotnet-dump 1 Magick.NET-Q8-x86 1 Lucene.Net.Replicator 1 Magick.NET-Q16-AnyCPU 1 CefSharp.WinForms.NetCore 1 libpng 1 magick.net-q16-anycpu 1 magick.net-q16-x64 1 Imageflow.NativeTool.osx_10_11-x86_64 1 Magick.NET-Q16-HDRI-x86 1 Magick.NET-Q16-x64 1 PowerShell 1 Microsoft.Extensions.Caching.Memory 1 magick.net-q8-openmp-x64 1 System.ServiceModel.Primitives 1 Imageflow.NativeRuntime.ubuntu_16_04-x86_64 1 Magick.NET-Q16-HDRI-x64 1 Auth0-ASPNET-Owin 1 Magick.NET-Q16-OpenMP-arm64 1 i18n 1 Microsoft.AspNetCore.Server.Kestrel.Transport.Libuv 1 Microsoft.Owin.Security.Cookies 1 Microsoft.Windows.Compatibility 1 CefSharp.OffScreen.NETCore 1 elFinder.NetCore 1 github.com/chai2010/webp 1 Serenity.Net.Web 1 Microsoft.NETCore.Jit 1 git-credential-manager 1 Microsoft.NETCore.UniversalWindowsPlatform 1 Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64 1 Magick.NET-Q8-x64 1 System.Linq.Dynamic.Core 1 TGServiceInterface 1 Microsoft.AspNetCore.Server.Kestrel.Transport.Sockets 1 Imageflow.NativeRuntime.osx-x86_64 1 NHibernate 1 OpenTelemetry.AutoInstrumentation 1 Imageflow.NativeTool.osx-x86_64 1 Snowflake.Data 1 SkiaSharp 1 Magick.NET-Q16-HDRI-AnyCPU 1 Tgstation.Server.Api 1

Filter by Repository