CVE-2019-0981: Denial of service in ASP.NET Core

The vulnerability stems from improper URI handling in System.Private.Uri. While explicit patch diffs aren't provided, the Microsoft advisory explicitly calls out this package and version range. URI parsing entry points like the constructor and internal parser methods are the most likely candidates. The DoS nature suggests functions involved in expensive parsing operations when processing malicious inputs. Confidence is medium due to lack of direct commit evidence, but grounded in the package's purpose and vulnerability type.