-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Microsoft.AspNetCore.All | nuget | >= 2.1.0, < 2.1.15 | 2.1.15 |
| Microsoft.AspNetCore.App | nuget | = 3.1.0 | 3.1.1 |
| Microsoft.AspNetCore.App | nuget | = 3.0.0 | 3.0.1 |
| Microsoft.AspNetCore.App | nuget | >= 2.1.0, < 2.1.15 | 2.1.15 |
| Microsoft.AspNetCore.Http.Connections | nuget | >= 1.0.0, < 1.0.15 | 1.0.15 |
| Microsoft.AspNetCore.App.Runtime.linux-arm | nuget | >= 3.1.0, < 3.1.1 | 3.1.1 |
| Microsoft.AspNetCore.App.Runtime.linux-arm64 | nuget | >= 3.1.0, < 3.1.1 | 3.1.1 |
| Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | nuget | >= 3.1.0, < 3.1.1 | 3.1.1 |
| Microsoft.AspNetCore.App.Runtime.linux-x64 | nuget | >= 3.1.0, < 3.1.1 | 3.1.1 |
| Microsoft.AspNetCore.App.Runtime.osx-x64 | nuget | >= 3.1.0, < 3.1.1 | 3.1.1 |
| Microsoft.AspNetCore.App.Runtime.win-arm | nuget | >= 3.1.0, < 3.1.1 | 3.1.1 |
| Microsoft.AspNetCore.App.Runtime.win-x64 | nuget | >= 3.1.0, < 3.1.1 | 3.1.1 |
| Microsoft.AspNetCore.App.Runtime.win-x86 | nuget | >= 3.1.0, < 3.1.1 | 3.1.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper backpressure management in ASP.NET Core's SignalR component. Key evidence includes: