{
  "affected": [
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-musl-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-musl-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.win-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.win-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.win-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.win-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.1.23"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-musl-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-musl-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-musl-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.linux-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.win-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.win-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.win-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.win-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.0.0"
            },
            {
              "fixed": "5.0.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-musl-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-musl-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-musl-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.browser-wasm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.ios-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.ios-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.linux-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.osx-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.tvos-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.win-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.Mono.win-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.osx-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.osx-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.win-arm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.win-arm64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.win-x64"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "NuGet",
        "name": "Microsoft.NETCore.App.Runtime.win-x86"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2022-24512"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": true,
    "github_reviewed_at": "2022-10-18T21:46:08Z",
    "nvd_published_at": "2022-03-09T17:15:00Z",
    "severity": "MODERATE"
  },
  "details": "Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0, and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\nA Remote Code Execution vulnerability exists in .NET 6.0, .NET 5.0, and .NET Core 3.1 where a stack buffer overrun occurs in .NET Double Parse routine.\n\n### Patches\n* Any .NET 6.0 application running on .NET 6.0.2 or lower\n* Any .NET 5.0 application running on .NET 5.0.14 or lower\n* Any .NET Core 3.1 application running on .NET Core 3.1.22 or lower\n\nTo fix the issue, please install the latest version of .NET 6.0, .NET 5.0, or .NET Core 3.1. If you have installed one or more .NET Core SDKs through Visual Studio, Visual Studio will prompt you to update Visual Studio, which will also update your .NET Core SDKs.\n\n* If you\u0027re using .NET 6.0, you should download and install Runtime 6.0.3 or SDK 6.0.103 (for Visual Studio 2019 v17.0) or SDK 6.0.201 (for Visual Studio 2019 V17.1) from https://dotnet.microsoft.com/download/dotnet-core/5.0.\n* If you\u0027re using .NET 5.0, you should download and install Runtime 5.0.15 or SDK 5.0.406 (for Visual Studio 2019 v16.11) or SDK 5.0.212 (for Visual Studio 2019 V16.9) from https://dotnet.microsoft.com/download/dotnet-core/5.0.\n* If you\u0027re using .NET Core 3.1, you should download and install Runtime 3.1.23 or SDK 3.1.417 (for Visual Studio 2019 v16.7) from https://dotnet.microsoft.com/download/dotnet-core/3.1.\n.NET 6.0, .NET 5.0, and .NET Core 3.1 updates are also available from Microsoft Update. To access this either type \"Check for updates\" in your Windows search, or open Settings, choose Update \u0026 Security and then click Check for Updates.\n\n### Other Details\n\n- Announcement for this issue can be found at dotnet/announcements#213\n- An Issue for this can be found at https://github.com/dotnet/runtime/issues/66348\n- MSRC details for this can be found at https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512",
  "id": "GHSA-c6w8-7mp3-34j9",
  "modified": "2024-04-22T18:51:00Z",
  "published": "2022-10-18T21:46:08Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512"
    },
    {
      "type": "WEB",
      "url": "https://github.com/dotnet/announcements/issues/213"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24512"
    },
    {
      "type": "WEB",
      "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
      "type": "CVSS_V3"
    }
  ],
  "summary": ".NET Remote Code Execution Vulnerability"
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET 6.0 is now available for .NET on Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 6.0.103 and .NET Runtime 6.0.3.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0832",
        "url": "https://access.redhat.com/errata/RHSA-2022:0832"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2061847",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
      },
      {
        "category": "external",
        "summary": "2061854",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0832.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET 6.0 on RHEL 7 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T00:33:12+00:00",
      "generator": {
        "date": "2024-11-06T00:33:12+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:0832",
      "initial_release_date": "2022-03-10T16:13:12+00:00",
      "revision_history": [
        {
          "date": "2022-03-10T16:13:12+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-03-10T16:13:12+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T00:33:12+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                  "product_id": "7ComputeNode-dotNET-6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:6.0::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-dotNET-6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:6.0::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-dotNET-6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:6.0::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": ".NET Core on Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-aspnetcore-runtime-6.0@6.0.3-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-aspnetcore-targeting-pack-6.0@6.0.3-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet@6.0.103-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-apphost-pack-6.0@6.0.3-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-host@6.0.3-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-hostfxr-6.0@6.0.3-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-runtime-6.0@6.0.3-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-sdk-6.0@6.0.103-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts@6.0.103-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-targeting-pack-6.0@6.0.3-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-templates-6.0@6.0.103-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-netstandard-targeting-pack-2.1@6.0.103-3.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
                  "product_id": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet-debuginfo@6.0.103-3.el7_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
                "product": {
                  "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
                  "product_id": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet60-dotnet@6.0.103-3.el7_9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-6.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-24464",
      "cwe": {
        "id": "CWE-1173",
        "name": "Improper Use of Validation Framework"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061847"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: ASP.NET Denial of Service via FormPipeReader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061847",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:13:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0832"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: ASP.NET Denial of Service via FormPipeReader"
    },
    {
      "cve": "CVE-2022-24512",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: double parser stack buffer overrun",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
          "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
          "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:13:12+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0832"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7ComputeNode-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Server-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.src",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-debuginfo-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-host-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-runtime-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-targeting-pack-6.0-0:6.0.3-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-dotnet-templates-6.0-0:6.0.103-3.el7_9.x86_64",
            "7Workstation-dotNET-6.0:rh-dotnet60-netstandard-targeting-pack-2.1-0:6.0.103-3.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: double parser stack buffer overrun"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET 6.0 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 6.0.103 and .NET Runtime 6.0.3.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0826",
        "url": "https://access.redhat.com/errata/RHSA-2022:0826"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2061847",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
      },
      {
        "category": "external",
        "summary": "2061854",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0826.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET 6.0 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T00:32:53+00:00",
      "generator": {
        "date": "2024-11-06T00:32:53+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:0826",
      "initial_release_date": "2022-03-10T16:06:50+00:00",
      "revision_history": [
        {
          "date": "2022-03-10T16:06:50+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-03-10T16:06:50+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T00:32:53+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.5.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-0:6.0.103-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-0:6.0.103-4.el8_5.aarch64",
                  "product_id": "dotnet-0:6.0.103-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet@6.0.103-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-host-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-host-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
                  "product_id": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.103-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
                  "product_id": "dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.103-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
                "product": {
                  "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
                  "product_id": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@6.0.103-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
                  "product_id": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.103-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host-debuginfo@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.3-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
                  "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.103-4.el8_5?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
                "product": {
                  "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
                  "product_id": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.103-4.el8_5?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-0:6.0.103-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-0:6.0.103-4.el8_5.x86_64",
                  "product_id": "dotnet-0:6.0.103-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet@6.0.103-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-host-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-host-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
                  "product_id": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.103-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
                  "product_id": "dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.103-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64",
                "product": {
                  "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64",
                  "product_id": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@6.0.103-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
                  "product_id": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.103-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host-debuginfo@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.3-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
                  "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.103-4.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
                "product": {
                  "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
                  "product_id": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.103-4.el8_5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_id": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-6.0@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_id": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-6.0@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-0:6.0.103-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-0:6.0.103-4.el8_5.s390x",
                  "product_id": "dotnet-0:6.0.103-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet@6.0.103-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-host-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-host-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
                  "product_id": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0@6.0.103-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-6.0@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
                  "product_id": "dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-6.0@6.0.103-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
                "product": {
                  "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
                  "product_id": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/netstandard-targeting-pack-2.1@6.0.103-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
                "product": {
                  "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
                  "product_id": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debugsource@6.0.103-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-6.0-debuginfo@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-host-debuginfo@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-6.0-debuginfo@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_id": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-6.0-debuginfo@6.0.3-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
                "product": {
                  "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
                  "product_id": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-6.0-debuginfo@6.0.103-4.el8_5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
                "product": {
                  "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
                  "product_id": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0-debuginfo@6.0.103-4.el8_5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet6.0-0:6.0.103-4.el8_5.src",
                "product": {
                  "name": "dotnet6.0-0:6.0.103-4.el8_5.src",
                  "product_id": "dotnet6.0-0:6.0.103-4.el8_5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet6.0@6.0.103-4.el8_5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-0:6.0.103-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-0:6.0.103-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-0:6.0.103-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.s390x"
        },
        "product_reference": "dotnet-0:6.0.103-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-0:6.0.103-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-0:6.0.103-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-host-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-host-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-host-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64"
        },
        "product_reference": "dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-0:6.0.103-4.el8_5.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet6.0-0:6.0.103-4.el8_5.src"
        },
        "product_reference": "dotnet6.0-0:6.0.103-4.el8_5.src",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64"
        },
        "product_reference": "dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64"
        },
        "product_reference": "dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64"
        },
        "product_reference": "netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-24464",
      "cwe": {
        "id": "CWE-1173",
        "name": "Improper Use of Validation Framework"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061847"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: ASP.NET Denial of Service via FormPipeReader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-0:6.0.103-4.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061847",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:06:50+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-0:6.0.103-4.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0826"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-0:6.0.103-4.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: ASP.NET Denial of Service via FormPipeReader"
    },
    {
      "cve": "CVE-2022-24512",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: double parser stack buffer overrun",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-0:6.0.103-4.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
          "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
          "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:06:50+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-0:6.0.103-4.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0826"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-host-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-6.0-debuginfo-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-6.0-0:6.0.3-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-6.0-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-0:6.0.103-4.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debuginfo-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:dotnet6.0-debugsource-0:6.0.103-4.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.aarch64",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.s390x",
            "AppStream-8.5.0.Z.MAIN:netstandard-targeting-pack-2.1-0:6.0.103-4.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: double parser stack buffer overrun"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET 5.0 is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 5.0.212 and .NET Runtime 5.0.15.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\n* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0828",
        "url": "https://access.redhat.com/errata/RHSA-2022:0828"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1879225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
      },
      {
        "category": "external",
        "summary": "2061847",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
      },
      {
        "category": "external",
        "summary": "2061854",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0828.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET 5.0 on RHEL 7 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T00:33:24+00:00",
      "generator": {
        "date": "2024-11-06T00:33:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:0828",
      "initial_release_date": "2022-03-10T16:12:40+00:00",
      "revision_history": [
        {
          "date": "2022-03-10T16:12:40+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-03-10T16:12:40+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T00:33:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                  "product_id": "7ComputeNode-dotNET-5.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:5.0::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-dotNET-5.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:5.0::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-dotNET-5.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:5.0::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": ".NET Core on Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-aspnetcore-runtime-5.0@5.0.15-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-aspnetcore-targeting-pack-5.0@5.0.15-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet@5.0.212-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-apphost-pack-5.0@5.0.15-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-host@5.0.15-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-hostfxr-5.0@5.0.15-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-runtime-5.0@5.0.15-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-sdk-5.0@5.0.212-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts@5.0.212-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-targeting-pack-5.0@5.0.15-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-templates-5.0@5.0.212-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-netstandard-targeting-pack-2.1@5.0.212-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
                  "product_id": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet-debuginfo@5.0.212-1.el7_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
                "product": {
                  "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
                  "product_id": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet50-dotnet@5.0.212-1.el7_9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-5.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-8927",
      "cwe": {
        "id": "CWE-130",
        "name": "Improper Handling of Length Parameter Inconsistency"
      },
      "discovery_date": "2020-09-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1879225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow flaw was found in the Brotli library where an attacker could control the input length of a \"one-shot\" decompression request to a script that can trigger a crash. This issue can happen when copying chunks of data larger than 2 GiB.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brotli: buffer overflow when input chunk is larger than 2GiB",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "RHBZ#1879225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-8927",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927"
        }
      ],
      "release_date": "2020-08-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:12:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0828"
        },
        {
          "category": "workaround",
          "details": "This flaw can be mitigated by using Streaming API instead of the One-Shot API and imposing chunk size limitations.",
          "product_ids": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brotli: buffer overflow when input chunk is larger than 2GiB"
    },
    {
      "cve": "CVE-2022-24464",
      "cwe": {
        "id": "CWE-1173",
        "name": "Improper Use of Validation Framework"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061847"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: ASP.NET Denial of Service via FormPipeReader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061847",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:12:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0828"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: ASP.NET Denial of Service via FormPipeReader"
    },
    {
      "cve": "CVE-2022-24512",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: double parser stack buffer overrun",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
          "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:12:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0828"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7ComputeNode-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Server-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-aspnetcore-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.src",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-apphost-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-debuginfo-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-host-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-hostfxr-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-runtime-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-targeting-pack-5.0-0:5.0.15-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-dotnet-templates-5.0-0:5.0.212-1.el7_9.x86_64",
            "7Workstation-dotNET-5.0:rh-dotnet50-netstandard-targeting-pack-2.1-0:5.0.212-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: double parser stack buffer overrun"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 3.1.417 and .NET Runtime 3.1.23.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\n* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0829",
        "url": "https://access.redhat.com/errata/RHSA-2022:0829"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1879225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
      },
      {
        "category": "external",
        "summary": "2061847",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
      },
      {
        "category": "external",
        "summary": "2061854",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0829.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET Core 3.1 on RHEL 7 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T00:33:09+00:00",
      "generator": {
        "date": "2024-11-06T00:33:09+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:0829",
      "initial_release_date": "2022-03-10T16:12:05+00:00",
      "revision_history": [
        {
          "date": "2022-03-10T16:12:05+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-03-10T16:12:05+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T00:33:09+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
                  "product_id": "7ComputeNode-dotNET-3.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:3.1::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-dotNET-3.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:3.1::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": ".NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-dotNET-3.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_dotnet:3.1::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": ".NET Core on Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-aspnetcore-runtime-3.1@3.1.23-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-aspnetcore-targeting-pack-3.1@3.1.23-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet@3.1.417-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-apphost-pack-3.1@3.1.23-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-host@3.1.23-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-hostfxr-3.1@3.1.23-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-runtime-3.1@3.1.23-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-sdk-3.1@3.1.417-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts@3.1.417-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-targeting-pack-3.1@3.1.23-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-templates-3.1@3.1.417-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-netstandard-targeting-pack-2.1@3.1.417-1.el7_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
                "product": {
                  "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
                  "product_id": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet-debuginfo@3.1.417-1.el7_9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
                "product": {
                  "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
                  "product_id": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rh-dotnet31-dotnet@3.1.417-1.el7_9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)",
          "product_id": "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7ComputeNode-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Server-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
        },
        "product_reference": "rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
        "relates_to_product_reference": "7Workstation-dotNET-3.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-8927",
      "cwe": {
        "id": "CWE-130",
        "name": "Improper Handling of Length Parameter Inconsistency"
      },
      "discovery_date": "2020-09-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1879225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow flaw was found in the Brotli library where an attacker could control the input length of a \"one-shot\" decompression request to a script that can trigger a crash. This issue can happen when copying chunks of data larger than 2 GiB.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brotli: buffer overflow when input chunk is larger than 2GiB",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "RHBZ#1879225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-8927",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927"
        }
      ],
      "release_date": "2020-08-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:12:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0829"
        },
        {
          "category": "workaround",
          "details": "This flaw can be mitigated by using Streaming API instead of the One-Shot API and imposing chunk size limitations.",
          "product_ids": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brotli: buffer overflow when input chunk is larger than 2GiB"
    },
    {
      "cve": "CVE-2022-24464",
      "cwe": {
        "id": "CWE-1173",
        "name": "Improper Use of Validation Framework"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061847"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: ASP.NET Denial of Service via FormPipeReader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061847",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:12:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0829"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: ASP.NET Denial of Service via FormPipeReader"
    },
    {
      "cve": "CVE-2022-24512",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: double parser stack buffer overrun",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
          "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:12:05+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0829"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7ComputeNode-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Server-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-aspnetcore-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.src",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-apphost-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-debuginfo-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-host-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-hostfxr-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-runtime-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-targeting-pack-3.1-0:3.1.23-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-dotnet-templates-3.1-0:3.1.417-1.el7_9.x86_64",
            "7Workstation-dotNET-3.1:rh-dotnet31-netstandard-targeting-pack-2.1-0:3.1.417-1.el7_9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: double parser stack buffer overrun"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET 5.0 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 5.0.212 and .NET Runtime 5.0.15.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\n* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0830",
        "url": "https://access.redhat.com/errata/RHSA-2022:0830"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1879225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
      },
      {
        "category": "external",
        "summary": "2061847",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
      },
      {
        "category": "external",
        "summary": "2061854",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0830.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET 5.0 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T00:33:18+00:00",
      "generator": {
        "date": "2024-11-06T00:33:18+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:0830",
      "initial_release_date": "2022-03-10T16:05:56+00:00",
      "revision_history": [
        {
          "date": "2022-03-10T16:05:56+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-03-10T16:05:56+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T00:33:18+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.5.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat CodeReady Linux Builder (v. 8)",
                "product": {
                  "name": "Red Hat CodeReady Linux Builder (v. 8)",
                  "product_id": "CRB-8.5.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-5.0@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-5.0@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-5.0@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-5.0@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-5.0@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
                  "product_id": "dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-5.0@5.0.212-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-5.0@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
                  "product_id": "dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-5.0@5.0.212-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
                  "product_id": "dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet5.0-debugsource@5.0.212-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-5.0-debuginfo@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-5.0-debuginfo@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                  "product_id": "dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-5.0-debuginfo@5.0.15-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
                  "product_id": "dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-5.0-debuginfo@5.0.212-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
                  "product_id": "dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet5.0-debuginfo@5.0.212-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
                  "product_id": "dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-5.0-source-built-artifacts@5.0.212-1.el8_5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet5.0-0:5.0.212-1.el8_5.src",
                "product": {
                  "name": "dotnet5.0-0:5.0.212-1.el8_5.src",
                  "product_id": "dotnet5.0-0:5.0.212-1.el8_5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet5.0@5.0.212-1.el8_5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet5.0-0:5.0.212-1.el8_5.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src"
        },
        "product_reference": "dotnet5.0-0:5.0.212-1.el8_5.src",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet5.0-0:5.0.212-1.el8_5.src as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src"
        },
        "product_reference": "dotnet5.0-0:5.0.212-1.el8_5.src",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
        },
        "product_reference": "dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-8927",
      "cwe": {
        "id": "CWE-130",
        "name": "Improper Handling of Length Parameter Inconsistency"
      },
      "discovery_date": "2020-09-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1879225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow flaw was found in the Brotli library where an attacker could control the input length of a \"one-shot\" decompression request to a script that can trigger a crash. This issue can happen when copying chunks of data larger than 2 GiB.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brotli: buffer overflow when input chunk is larger than 2GiB",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "RHBZ#1879225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-8927",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927"
        }
      ],
      "release_date": "2020-08-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:05:56+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0830"
        },
        {
          "category": "workaround",
          "details": "This flaw can be mitigated by using Streaming API instead of the One-Shot API and imposing chunk size limitations.",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brotli: buffer overflow when input chunk is larger than 2GiB"
    },
    {
      "cve": "CVE-2022-24464",
      "cwe": {
        "id": "CWE-1173",
        "name": "Improper Use of Validation Framework"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061847"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: ASP.NET Denial of Service via FormPipeReader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061847",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:05:56+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0830"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: ASP.NET Denial of Service via FormPipeReader"
    },
    {
      "cve": "CVE-2022-24512",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: double parser stack buffer overrun",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:05:56+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0830"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-5.0-debuginfo-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-5.0-source-built-artifacts-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-5.0-0:5.0.15-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-5.0-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-0:5.0.212-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debuginfo-0:5.0.212-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet5.0-debugsource-0:5.0.212-1.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: double parser stack buffer overrun"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for .NET Core 3.1 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address security vulnerabilities are now available. The updated versions are .NET SDK 3.1.417 and .NET Runtime 3.1.23.\n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\n* brotli: buffer overflow when input chunk is larger than 2GiB (CVE-2020-8927)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:0827",
        "url": "https://access.redhat.com/errata/RHSA-2022:0827"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1879225",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
      },
      {
        "category": "external",
        "summary": "2061847",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
      },
      {
        "category": "external",
        "summary": "2061854",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0827.json"
      }
    ],
    "title": "Red Hat Security Advisory: .NET Core 3.1 security and bugfix update",
    "tracking": {
      "current_release_date": "2024-11-06T00:33:01+00:00",
      "generator": {
        "date": "2024-11-06T00:33:01+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2022:0827",
      "initial_release_date": "2022-03-10T16:06:18+00:00",
      "revision_history": [
        {
          "date": "2022-03-10T16:06:18+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-03-10T16:06:18+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-06T00:33:01+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.5.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat CodeReady Linux Builder (v. 8)",
                "product": {
                  "name": "Red Hat CodeReady Linux Builder (v. 8)",
                  "product_id": "CRB-8.5.0.Z.MAIN",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-3.1@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-targeting-pack-3.1@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-3.1@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-3.1@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-3.1@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
                  "product_id": "dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-3.1@3.1.417-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-targeting-pack-3.1@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
                  "product_id": "dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-templates-3.1@3.1.417-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
                  "product_id": "dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet3.1-debugsource@3.1.417-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-apphost-pack-3.1-debuginfo@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-hostfxr-3.1-debuginfo@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                  "product_id": "dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-runtime-3.1-debuginfo@3.1.23-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
                  "product_id": "dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-3.1-debuginfo@3.1.417-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
                  "product_id": "dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet3.1-debuginfo@3.1.417-1.el8_5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
                "product": {
                  "name": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
                  "product_id": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet-sdk-3.1-source-built-artifacts@3.1.417-1.el8_5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet3.1-0:3.1.417-1.el8_5.src",
                "product": {
                  "name": "dotnet3.1-0:3.1.417-1.el8_5.src",
                  "product_id": "dotnet3.1-0:3.1.417-1.el8_5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet3.1@3.1.417-1.el8_5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-0:3.1.417-1.el8_5.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src"
        },
        "product_reference": "dotnet3.1-0:3.1.417-1.el8_5.src",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "AppStream-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-0:3.1.417-1.el8_5.src as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src"
        },
        "product_reference": "dotnet3.1-0:3.1.417-1.el8_5.src",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
          "product_id": "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
        },
        "product_reference": "dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
        "relates_to_product_reference": "CRB-8.5.0.Z.MAIN"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-8927",
      "cwe": {
        "id": "CWE-130",
        "name": "Improper Handling of Length Parameter Inconsistency"
      },
      "discovery_date": "2020-09-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1879225"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow flaw was found in the Brotli library where an attacker could control the input length of a \"one-shot\" decompression request to a script that can trigger a crash. This issue can happen when copying chunks of data larger than 2 GiB.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brotli: buffer overflow when input chunk is larger than 2GiB",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "RHBZ#1879225",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1879225"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-8927",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-8927"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8927"
        }
      ],
      "release_date": "2020-08-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:06:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0827"
        },
        {
          "category": "workaround",
          "details": "This flaw can be mitigated by using Streaming API instead of the One-Shot API and imposing chunk size limitations.",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brotli: buffer overflow when input chunk is larger than 2GiB"
    },
    {
      "cve": "CVE-2022-24464",
      "cwe": {
        "id": "CWE-1173",
        "name": "Improper Use of Validation Framework"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061847"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: ASP.NET Denial of Service via FormPipeReader",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061847",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061847"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24464"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24464"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:06:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0827"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: ASP.NET Denial of Service via FormPipeReader"
    },
    {
      "cve": "CVE-2022-24512",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2022-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2061854"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: double parser stack buffer overrun",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
          "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "RHBZ#2061854",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2061854"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-24512",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24512"
        },
        {
          "category": "external",
          "summary": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512",
          "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-24512"
        }
      ],
      "release_date": "2022-03-08T18:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-03-10T16:06:18+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:0827"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "AppStream-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:aspnetcore-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-apphost-pack-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-hostfxr-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-runtime-3.1-debuginfo-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-sdk-3.1-source-built-artifacts-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-targeting-pack-3.1-0:3.1.23-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet-templates-3.1-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-0:3.1.417-1.el8_5.src",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debuginfo-0:3.1.417-1.el8_5.x86_64",
            "CRB-8.5.0.Z.MAIN:dotnet3.1-debugsource-0:3.1.417-1.el8_5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: double parser stack buffer overrun"
    }
  ]
}

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202203-0090",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "36"
      },
      {
        "model": "visual studio 2022",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "17.0.7"
      },
      {
        "model": "visual studio 2019",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.10.4"
      },
      {
        "model": "visual studio 2019",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.0"
      },
      {
        "model": "visual studio 2022",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "17.0"
      },
      {
        "model": "visual studio 2019",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.10.0"
      },
      {
        "model": "powershell",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "7.0.9"
      },
      {
        "model": ".net",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "6.0.0"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "35"
      },
      {
        "model": "powershell",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "7.2.2"
      },
      {
        "model": "visual studio 2019",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.8.7"
      },
      {
        "model": "powershell",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "7.1"
      },
      {
        "model": "visual studio 2019",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.11.11"
      },
      {
        "model": "visual studio 2019",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.6.4"
      },
      {
        "model": "powershell",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "7.1.6"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "34"
      },
      {
        "model": "visual studio 2019",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.7.0"
      },
      {
        "model": "powershell",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "7.0"
      },
      {
        "model": "visual studio 2019",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.11.0"
      },
      {
        "model": ".net",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "5.0"
      },
      {
        "model": "visual studio 2019",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.7.26"
      },
      {
        "model": "visual studio 2019",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.8.0"
      },
      {
        "model": ".net core",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "3.1"
      },
      {
        "model": "visual studio 2019",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.9.18"
      },
      {
        "model": "powershell",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "7.2"
      },
      {
        "model": "visual studio 2019",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "microsoft",
        "version": "16.9.0"
      },
      {
        "model": "powershell",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": "7.1"
      },
      {
        "model": ".net core",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": null
      },
      {
        "model": "powershell",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": "7.0"
      },
      {
        "model": ".net",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": null
      },
      {
        "model": "powershell",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": "7.2"
      },
      {
        "model": "microsoft visual studio",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001463"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-24512"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:.net:5.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:.net_core:3.1:-:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:.net:6.0.0:-:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.7.26",
                "versionStartIncluding": "16.7.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.9.18",
                "versionStartIncluding": "16.9.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.2.2",
                "versionStartIncluding": "7.2",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.0.9",
                "versionStartIncluding": "7.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.1.6",
                "versionStartIncluding": "7.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "16.6.4",
                "versionStartIncluding": "16.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "16.8.7",
                "versionStartIncluding": "16.8.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "16.10.4",
                "versionStartIncluding": "16.10.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.11.11",
                "versionStartIncluding": "16.11.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "17.0.7",
                "versionStartIncluding": "17.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-24512"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Red Hat",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "166260"
      },
      {
        "db": "PACKETSTORM",
        "id": "166271"
      },
      {
        "db": "PACKETSTORM",
        "id": "166270"
      },
      {
        "db": "PACKETSTORM",
        "id": "166269"
      },
      {
        "db": "PACKETSTORM",
        "id": "166267"
      },
      {
        "db": "PACKETSTORM",
        "id": "166266"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2022-24512",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "MEDIUM",
            "trust": 1.0,
            "userInteractionRequired": true,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Medium",
            "accessVector": "Network",
            "authentication": "None",
            "author": "NVD",
            "availabilityImpact": "Partial",
            "baseScore": 6.8,
            "confidentialityImpact": "Partial",
            "exploitabilityScore": null,
            "id": "CVE-2022-24512",
            "impactScore": null,
            "integrityImpact": "Partial",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "Medium",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "NVD",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "exploitabilityScore": 2.8,
            "impactScore": 3.4,
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 2.0,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 8.8,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2022-24512",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "Required",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2022-24512",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "secure@microsoft.com",
            "id": "CVE-2022-24512",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2022-24512",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202203-699",
            "trust": 0.6,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001463"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-24512"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-24512"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-699"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": ".NET and Visual Studio Remote Code Execution Vulnerability. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=====================================================================\n                   Red Hat Security Advisory\n\nSynopsis:          Important: .NET 6.0 on RHEL 7 security and bugfix update\nAdvisory ID:       RHSA-2022:0832-01\nProduct:           .NET Core on Red Hat Enterprise Linux\nAdvisory URL:      https://access.redhat.com/errata/RHSA-2022:0832\nIssue date:        2022-03-10\nCVE Names:         CVE-2022-24464 CVE-2022-24512 \n=====================================================================\n\n1. Summary:\n\nAn update for .NET 6.0 is now available for .NET on Red Hat Enterprise\nLinux 7. \n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\n.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64\n.NET Core on Red Hat Enterprise Linux Server (v. 7) - x86_64\n.NET Core on Red Hat Enterprise Linux Workstation (v. 7) - x86_64\n\n3. Description:\n\n.NET is a managed-software framework. It implements a subset of the .NET\nframework APIs and several new APIs, and it includes a CLR implementation. \n\nNew versions of .NET that address security vulnerabilities are now\navailable. The updated versions are .NET SDK 6.0.103 and .NET Runtime\n6.0.3. \n\nSecurity Fix(es):\n\n* dotnet: ASP.NET Denial of Service via FormPipeReader (CVE-2022-24464)\n\n* dotnet: double parser stack buffer overrun (CVE-2022-24512)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n2061847 - CVE-2022-24464 dotnet: ASP.NET Denial of Service via FormPipeReader\n2061854 - CVE-2022-24512 dotnet: double parser stack buffer overrun\n\n6. Package List:\n\n.NET Core on Red Hat Enterprise Linux ComputeNode (v. 7):\n\nSource:\nrh-dotnet60-dotnet-6.0.103-3.el7_9.src.rpm\n\nx86_64:\nrh-dotnet60-aspnetcore-runtime-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-apphost-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-debuginfo-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-host-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-hostfxr-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-runtime-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-targeting-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-templates-6.0-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-netstandard-targeting-pack-2.1-6.0.103-3.el7_9.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux Server (v. 7):\n\nSource:\nrh-dotnet60-dotnet-6.0.103-3.el7_9.src.rpm\n\nx86_64:\nrh-dotnet60-aspnetcore-runtime-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-apphost-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-debuginfo-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-host-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-hostfxr-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-runtime-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-targeting-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-templates-6.0-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-netstandard-targeting-pack-2.1-6.0.103-3.el7_9.x86_64.rpm\n\n.NET Core on Red Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nrh-dotnet60-dotnet-6.0.103-3.el7_9.src.rpm\n\nx86_64:\nrh-dotnet60-aspnetcore-runtime-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-aspnetcore-targeting-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-apphost-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-debuginfo-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-host-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-hostfxr-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-runtime-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-sdk-6.0-source-built-artifacts-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-targeting-pack-6.0-6.0.3-3.el7_9.x86_64.rpm\nrh-dotnet60-dotnet-templates-6.0-6.0.103-3.el7_9.x86_64.rpm\nrh-dotnet60-netstandard-targeting-pack-2.1-6.0.103-3.el7_9.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security.  Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2022-24464\nhttps://access.redhat.com/security/cve/CVE-2022-24512\nhttps://access.redhat.com/security/updates/classification/#important\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2022 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n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\n5npIufme4D0=\n=V/tf\n-----END PGP SIGNATURE-----\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://listman.redhat.com/mailman/listinfo/rhsa-announce\n. 8) - aarch64, s390x, x86_64\n\n3",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-24512"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001463"
      },
      {
        "db": "PACKETSTORM",
        "id": "166260"
      },
      {
        "db": "PACKETSTORM",
        "id": "166271"
      },
      {
        "db": "PACKETSTORM",
        "id": "166270"
      },
      {
        "db": "PACKETSTORM",
        "id": "166269"
      },
      {
        "db": "PACKETSTORM",
        "id": "166267"
      },
      {
        "db": "PACKETSTORM",
        "id": "166266"
      }
    ],
    "trust": 2.16
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-24512",
        "trust": 3.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001463",
        "trust": 0.8
      },
      {
        "db": "PACKETSTORM",
        "id": "166271",
        "trust": 0.7
      },
      {
        "db": "CS-HELP",
        "id": "SB2022031027",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2022030847",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2022.1015",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-699",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "166260",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "166270",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "166269",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "166267",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "166266",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001463"
      },
      {
        "db": "PACKETSTORM",
        "id": "166260"
      },
      {
        "db": "PACKETSTORM",
        "id": "166271"
      },
      {
        "db": "PACKETSTORM",
        "id": "166270"
      },
      {
        "db": "PACKETSTORM",
        "id": "166269"
      },
      {
        "db": "PACKETSTORM",
        "id": "166267"
      },
      {
        "db": "PACKETSTORM",
        "id": "166266"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-24512"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-699"
      }
    ]
  },
  "id": "VAR-202203-0090",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.21178882
  },
  "last_update_date": "2023-12-21T19:57:56.496000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": ".NET\u00a0and\u00a0Visual\u00a0Studio\u00a0Remote\u00a0Code\u00a0Execution\u00a0Vulnerability Security Update Guide",
        "trust": 0.8,
        "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2022-24512"
      },
      {
        "title": "Microsoft .NET Core  and Microsoft Visual Studio Fixes for code injection vulnerabilities",
        "trust": 0.6,
        "url": "http://123.124.177.30/web/xxk/bdxqbyid.tag?id=185196"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001463"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-699"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-noinfo",
        "trust": 1.0
      },
      {
        "problemtype": "Lack of information (CWE-noinfo) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001463"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-24512"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.2,
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/cve-2022-24512"
      },
      {
        "trust": 2.0,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-24512"
      },
      {
        "trust": 1.2,
        "url": "https://access.redhat.com/security/cve/cve-2022-24512"
      },
      {
        "trust": 0.8,
        "url": "https://www.ipa.go.jp/security/ciadr/vul/20220309-ms.html"
      },
      {
        "trust": 0.8,
        "url": "https://www.jpcert.or.jp/at/2022/at220007.html"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/cve/cve-2022-24464"
      },
      {
        "trust": 0.6,
        "url": "https://listman.redhat.com/mailman/listinfo/rhsa-announce"
      },
      {
        "trust": 0.6,
        "url": "https://bugzilla.redhat.com/):"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/team/key/"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-24464"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/articles/11258"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/team/contact/"
      },
      {
        "trust": 0.6,
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/os2q4nprsarp7ghlkfliyhfopsydo6mk/"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/mqlm7abvcyjlf6jrpf3m3ebxw63gnc27/"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/mrgspxmzy4rm2l35fyhcxbfrolc23b2v/"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4togtz2zwdh662znffszvl3m5ajxv6jf/"
      },
      {
        "trust": 0.6,
        "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2022-24512"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/cijgcvklhvnlfbteyjgws43qg5dyjfbl/"
      },
      {
        "trust": 0.6,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/zxeq3gqvela2t4hnzg7vpms2hdvxmjrg/"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2022030847"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2022.1015"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-24512/"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/166271/red-hat-security-advisory-2022-0826-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/microsoft-net-vulnerabilities-of-march-2022-37733"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/microsoft-visual-studio-vulnerabilities-of-march-2022-37737"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2022031027"
      },
      {
        "trust": 0.4,
        "url": "https://access.redhat.com/security/cve/cve-2020-8927"
      },
      {
        "trust": 0.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-8927"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:0832"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:0826"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:0827"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:0828"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:0829"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:0830"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001463"
      },
      {
        "db": "PACKETSTORM",
        "id": "166260"
      },
      {
        "db": "PACKETSTORM",
        "id": "166271"
      },
      {
        "db": "PACKETSTORM",
        "id": "166270"
      },
      {
        "db": "PACKETSTORM",
        "id": "166269"
      },
      {
        "db": "PACKETSTORM",
        "id": "166267"
      },
      {
        "db": "PACKETSTORM",
        "id": "166266"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-24512"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-699"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001463"
      },
      {
        "db": "PACKETSTORM",
        "id": "166260"
      },
      {
        "db": "PACKETSTORM",
        "id": "166271"
      },
      {
        "db": "PACKETSTORM",
        "id": "166270"
      },
      {
        "db": "PACKETSTORM",
        "id": "166269"
      },
      {
        "db": "PACKETSTORM",
        "id": "166267"
      },
      {
        "db": "PACKETSTORM",
        "id": "166266"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-24512"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-699"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-03-17T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001463"
      },
      {
        "date": "2022-03-11T16:10:28",
        "db": "PACKETSTORM",
        "id": "166260"
      },
      {
        "date": "2022-03-11T16:33:33",
        "db": "PACKETSTORM",
        "id": "166271"
      },
      {
        "date": "2022-03-11T16:33:16",
        "db": "PACKETSTORM",
        "id": "166270"
      },
      {
        "date": "2022-03-11T16:33:04",
        "db": "PACKETSTORM",
        "id": "166269"
      },
      {
        "date": "2022-03-11T16:31:42",
        "db": "PACKETSTORM",
        "id": "166267"
      },
      {
        "date": "2022-03-11T16:31:28",
        "db": "PACKETSTORM",
        "id": "166266"
      },
      {
        "date": "2022-03-09T17:15:15.737000",
        "db": "NVD",
        "id": "CVE-2022-24512"
      },
      {
        "date": "2022-03-08T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202203-699"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-03-17T01:58:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-001463"
      },
      {
        "date": "2023-12-21T01:43:55.993000",
        "db": "NVD",
        "id": "CVE-2022-24512"
      },
      {
        "date": "2023-06-30T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202203-699"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-699"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural \u00a0Microsoft\u00a0 Remote Code Execution Vulnerability in Product",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-001463"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "code injection",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202203-699"
      }
    ],
    "trust": 0.6
  }
}

{
  "GSD": {
    "alias": "CVE-2022-24512",
    "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
    "id": "GSD-2022-24512",
    "references": [
      "https://access.redhat.com/errata/RHSA-2022:0832",
      "https://access.redhat.com/errata/RHSA-2022:0830",
      "https://access.redhat.com/errata/RHSA-2022:0829",
      "https://access.redhat.com/errata/RHSA-2022:0828",
      "https://access.redhat.com/errata/RHSA-2022:0827",
      "https://access.redhat.com/errata/RHSA-2022:0826",
      "https://linux.oracle.com/cve/CVE-2022-24512.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-24512"
      ],
      "details": ".NET and Visual Studio Remote Code Execution Vulnerability",
      "id": "GSD-2022-24512",
      "modified": "2023-12-13T01:19:42.908063Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@microsoft.com",
        "ID": "CVE-2022-24512",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Microsoft Visual Studio 2019 version 16.7 (includes 16.0 \u2013 16.6)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "16.0.0",
                          "version_value": "16.7.26"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "15.0.0",
                          "version_value": "16.9.18"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "16.11.0",
                          "version_value": "16.11.11"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Microsoft Visual Studio 2022 version 17.0",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "17.0.0",
                          "version_value": "17.0.7"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": ".NET 5.0",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "5.0.0",
                          "version_value": "5.0.15"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": ".NET 6.0",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "6.0.0",
                          "version_value": "6.0.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": ".NET Core 3.1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "3.1",
                          "version_value": "3.1.23"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "PowerShell 7.2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "7.2.0",
                          "version_value": "7.2.2"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "PowerShell 7.0",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "7.0.0",
                          "version_value": "7.0.9"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "PowerShell 7.1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "7.1.0",
                          "version_value": "7.1.6"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Microsoft"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": ".NET and Visual Studio Remote Code Execution Vulnerability"
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Remote Code Execution"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24512",
            "refsource": "MISC",
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24512"
          }
        ]
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "8b1938eb-6a84-4111-af0f-18485dbc113e"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "64dbf739-8374-4c32-9f72-0833d473bc69"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "23922f15-b58a-4d88-aec4-38e8598d34bf"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "a23db459-d5a7-4a8c-a35d-619918ed4560"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "063036ab-4f0d-4461-a7f7-42c419fcd13e"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "82dc0fa8-38c3-4cc2-b8d6-12dd003c8317"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "3e4f5a2d-007e-4069-b95b-157b0c67f6bb"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "1797be0e-7009-44f6-abb1-7502cb4e9520"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "2d840f93-b836-4396-aa0b-1f7fbda70f24"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "49aed9aa-b86e-48f6-aa78-9ebaf9e2afb0"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "22d977b9-dca2-4276-8353-cb2dc97670c5"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "786171be-43a0-4879-a498-8f77c53229a3"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "9f714152-a571-4c2d-a4ec-a982c3d13fd7"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "d8e1b6fc-777c-4f4b-b9a4-b0527c0f08af"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "36a0bf69-5f03-481b-8660-9dba6ba9d43c"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "2c08fd81-1818-4edb-a552-0d6fcbb74161"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "e48adff9-2492-43bb-b40a-bc1d81a01f59"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "46b9e502-1e6a-4410-a267-cfe3b84e5f5e"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "6be33889-ef86-4b33-8290-7e8314a7dfb4"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "f0b003bf-effd-4318-850b-d7f120e5b5bc"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "5ed14687-2713-4a3f-9b32-12e3671afa0f"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "1a02b37f-23d6-4a8a-a29b-8c17414c6d59"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "87a7108e-c91b-4198-bec7-cc5101b89583"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "cef07dc9-7d12-4ece-b526-bb9a5022d68d"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "3212a3b4-ef57-4585-80cc-d757b0d14c4d"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "0ac23687-c4f2-4b0c-8e5c-ed3591ab77a6"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "ec670797-6de9-4a91-bade-2b26d4cca0cd"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "b6e778b5-62bc-429f-99ff-0a49890f4f20"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "5eba2eca-2b6d-4994-bbce-2d86cf667de5"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "ba159a4f-c195-4be3-af89-62c1f74aed23"
        },
        {
          "affected_range": "[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "699a2049-0666-42d6-9055-5970c9762e95"
        },
        {
          "affected_range": "[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "0b584ee6-bb6a-4878-8edd-4f47dce42910"
        },
        {
          "affected_range": "[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "d1c4f0e1-f8ec-43c0-b20a-2857e0190a05"
        },
        {
          "affected_range": "[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "376bcfd1-a1c3-4037-8b28-ca8c557615f1"
        },
        {
          "affected_range": "[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "0bcdabb5-50bd-4923-af03-8969f7a1e207"
        },
        {
          "affected_range": "[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "249f1d22-50e9-4cd6-b591-a44fbbf6382d"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "23e016eb-82fd-43d5-9968-1dfc5e9862ab"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "210d3736-6507-4c6d-af74-10b8b75f70e5"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "85218d03-2fca-4199-aa06-3b4a3872ddb5"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-arm",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "a865a177-6e12-4582-b00d-be6227d71f1d"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "a619a5e7-f4f1-47c3-ae6a-faa68b1504c4"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "04240794-c781-4ef4-888e-5922648b0d8e"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "661fe3cb-97d7-437e-af6d-1b628a5e5f94"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "15e482bd-9388-47b0-b8ec-ba8c237a1058"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "55a2d927-e2ff-4e5a-bf4d-38fff382e9c6"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "da95c2fe-c481-4f1e-9c73-716efdc3f654"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "be70ffab-a59f-459a-976f-794ccce51eaf"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "f1d47144-ee88-43e3-bc79-8dcbacc39d82"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "ef553da9-9751-4053-a29f-999e2698def2"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "cab2655c-95cd-498a-8741-17db10c42890"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "db8b1c31-2615-4b5b-8d3b-134554c0958d"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.android-x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "d5dd9637-43ad-45c0-b545-8ac5500dec9e"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "52285aab-f729-4bab-85b7-c9f95438a8d7"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "16058bca-2b0c-4856-b7a9-c8088652aec3"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "925e1c83-f788-4b1c-9965-2c9b68337e2f"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.browser-wasm",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "48ed93c8-a752-4e5f-a4f3-a8b4b3878ce6"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "2edb0097-c813-4e2d-b53c-5aca91895946"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "53b8df8a-4680-472a-aa76-333094f9ec4d"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "40205b3e-1d43-4be6-9603-0ffe912f34b9"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.ios-arm",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "b88c728e-0f11-4264-978c-391b73126b8e"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "cd84c8af-f352-459a-8dc3-1fede854a379"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "5efc246a-6fbc-4fa3-99e5-710bfa0b6d18"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "872ae514-ba47-4f20-86b8-6680dd4df487"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.ios-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "6885deb2-0295-48d6-b637-067e02974407"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "397b63b3-5e43-47a5-a26d-c7df47c505e9"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "138eeaf7-889a-4e13-b0f3-6a4e88db98ad"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "dc2cf043-6d97-434b-b0ca-dd87a6a29a38"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "d1060a9b-e6a0-4c30-81ec-f9e525be1fb8"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "2c59726f-869f-441f-ae6c-f36f7c7f89ce"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "3580c5b2-ffd7-4051-92f0-64f187899b90"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "1943fc7b-951a-4ade-a24d-92d789d67aff"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "b6833474-f69d-4082-9995-32af4a63c88a"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "c526cbcf-fd1d-403f-acde-50c7b74657c4"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "3ee84776-2660-4422-9400-1fe8611de64e"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "ed75b16a-2e92-4d7c-85a4-a6a7b6019f84"
        },
        {
          "affected_range": "[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.linux-arm",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "6857e209-4293-40e2-8ba8-cf092d9d3a21"
        },
        {
          "affected_range": "[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.linux-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "f3be5003-63c6-4859-ad56-cb7ff5525355"
        },
        {
          "affected_range": "[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "0efba5b9-d708-4c9b-82ea-41346d518ab0"
        },
        {
          "affected_range": "[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.linux-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "2addef50-4815-45bc-b458-19e8c2b41543"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "f5d90a2e-62d5-4beb-86ce-5adb619be653"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "52257464-58de-464e-949d-1c5760464bc1"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "24b85508-9dda-4b59-b5b4-82e4c454437f"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "ecf37366-6e46-4978-82eb-704543733cc1"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "04cf82b3-c2ed-49f4-b22e-69299596f80d"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "91ba040b-6e60-40ec-b743-d1e73bc26bab"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "7d259003-fafe-4286-afa6-0697b5bbef1e"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "dc99c022-3806-45dc-a4fb-0f12d53853a1"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.osx-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "a0c53b5e-b209-427a-ab8c-b0716e7772d2"
        },
        {
          "affected_range": "[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.osx-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "cdd1c235-bd3f-4f79-8637-7848c1068f2a"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "a7cee83e-d284-4077-ad0e-4774586a5898"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "972fc3d3-b841-439f-aa5d-6d8898748eab"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "79ca49f1-30a7-421a-8ff0-5e350dd7c3e6"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.tvos-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "be389a42-1629-413a-a099-092e03e1a40d"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "ae9838f7-8e8a-4788-a01f-1ff0ccd6dfac"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "ac19e00d-1964-4caf-a8d8-a8464d7f93a9"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "92dd1e73-7bd7-4679-99bf-e1ccf3288c77"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "47608227-50d6-4042-80cc-932e6098f28c"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "53d40e1c-6ebb-4dd7-86a1-1218fc16d494"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "e3181998-ed6d-49a2-bd51-be44e2c7c99a"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "381da91c-cc4a-4005-9b19-527e09e93f75"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "329e1fde-e54f-4dec-a55a-1e594968db07"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.win-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "b9c41756-ab76-4468-a94a-9bc6145f6105"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.Mono.win-x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "49057948-a562-453c-ac39-a608a891fd18"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.linux-arm",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "d7cded18-1354-487b-99a5-d648d89a9320"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.linux-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "5abedca8-0922-439d-93c8-a0cb2b41065c"
        },
        {
          "affected_range": "[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "96d5e758-3898-4a22-a92e-2b806b8587ea"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.linux-musl-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "f53ddb90-6b17-470d-966d-9a410fc9644c"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.linux-musl-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "be2714ed-3c73-432e-a45c-0e9a7107b8cd"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.linux-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "05ae7d03-8530-4222-b61b-9c116f086f9f"
        },
        {
          "affected_range": "[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.osx-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to version 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "58373e35-ea80-4d5c-ba11-cab8d9ee6714"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.osx-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "c67c2a10-8f80-4dd6-9c6c-d06fc2054cff"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.win-arm",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "5fd32d0f-dc56-4380-b6ed-a05db616d84a"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.win-arm64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "96ca9a44-0282-4c52-a5f2-820529e69e32"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.win-x64",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "e2e78c39-f299-4c83-b53e-6ce2803263d1"
        },
        {
          "affected_range": "[3.0.0,3.1.23),[5.0.0,5.0.15),[6.0.0,6.0.3)",
          "affected_versions": "All versions starting from 3.0.0 before 3.1.23, all versions starting from 5.0.0 before 5.0.15, all versions starting from 6.0.0 before 6.0.3",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2022-10-18",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "3.1.23",
            "5.0.15",
            "6.0.3"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "GHSA-c6w8-7mp3-34j9",
            "CVE-2022-24512"
          ],
          "not_impacted": "All versions before 3.0.0, all versions starting from 3.1.23 before 5.0.0, all versions starting from 5.0.15 before 6.0.0, all versions starting from 6.0.3",
          "package_slug": "nuget/Microsoft.NETCore.App.Runtime.win-x86",
          "pubdate": "2022-10-18",
          "solution": "Upgrade to versions 3.1.23, 5.0.15, 6.0.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://github.com/dotnet/runtime/security/advisories/GHSA-c6w8-7mp3-34j9",
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://github.com/dotnet/announcements/issues/213",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://github.com/advisories/GHSA-c6w8-7mp3-34j9"
          ],
          "uuid": "fb7536d5-8ac6-4c0e-9135-a1882c511679"
        },
        {
          "affected_range": "[5.0,6.0.0]",
          "affected_versions": "All versions starting from 5.0 up to 6.0.0",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-05-12",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "CVE-2022-24512"
          ],
          "not_impacted": "",
          "package_slug": "nuget/System.Text.Encodings.Web",
          "pubdate": "2022-03-09",
          "solution": "Unfortunately, there is no solution available yet.",
          "title": "Code Injection",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512"
          ],
          "uuid": "3e03e60f-954d-44b4-94f2-38bb9bac4d86"
        },
        {
          "affected_range": "[7.0,7.0.9),[7.1,7.1.6),[7.2,7.2.2)",
          "affected_versions": "All versions starting from 7.0 before 7.0.9, all versions starting from 7.1 before 7.1.6, all versions starting from 7.2 before 7.2.2",
          "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2023-06-29",
          "description": ".NET and Visual Studio Remote Code Execution Vulnerability.",
          "fixed_versions": [
            "7.0.9",
            "7.1.6",
            "7.2.2"
          ],
          "identifier": "CVE-2022-24512",
          "identifiers": [
            "CVE-2022-24512"
          ],
          "not_impacted": "",
          "package_slug": "nuget/powershell",
          "pubdate": "2022-03-09",
          "solution": "Upgrade to version 7.0.9, 7.1.6, 7.2.2 or above.",
          "title": "Remote Code Execution",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2022-24512",
            "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24512",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRGSPXMZY4RM2L35FYHCXBFROLC23B2V/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OS2Q4NPRSARP7GHLKFLIYHFOPSYDO6MK/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXEQ3GQVELA2T4HNZG7VPMS2HDVXMJRG/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CIJGCVKLHVNLFBTEYJGWS43QG5DYJFBL/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MQLM7ABVCYJLF6JRPF3M3EBXW63GNC27/",
            "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4TOGTZ2ZWDH662ZNFFSZVL3M5AJXV6JF/"
          ],
          "uuid": "c11f56e3-806c-44bd-a7ee-12bc81a4e13b"
        }
      ]
    },
    "nvd.nist.gov": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:5.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C8F02D5C-61F1-4381-8D64-8BEB5CED0DC6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:6.0.0:-:*:*:*:*:*:*",
                    "matchCriteriaId": "1DE0C8DD-9C73-4876-8193-068F18074B58",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net_core:3.1:-:*:*:*:*:*:*",
                    "matchCriteriaId": "70BE107E-20A0-4998-A8ED-BCC414C6BDBF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "77F72A4A-239D-4362-B42C-2B125FD977AB",
                    "versionEndExcluding": "7.0.9",
                    "versionStartIncluding": "7.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A2C644EF-33B6-440F-8051-6A0D3C096F67",
                    "versionEndExcluding": "7.1.6",
                    "versionStartIncluding": "7.1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CD5CE10E-FCBF-4FBA-9B4E-BEB7F7E902A1",
                    "versionEndExcluding": "7.2.2",
                    "versionStartIncluding": "7.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A6222A0C-EC9B-4AB2-A89F-5D62B381A212",
                    "versionEndIncluding": "16.6.4",
                    "versionStartIncluding": "16.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "367AC9B2-D639-40F6-93FB-822F73E65C30",
                    "versionEndExcluding": "16.7.26",
                    "versionStartIncluding": "16.7.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AC9599DF-664B-4630-9FCD-7FCD846728A1",
                    "versionEndIncluding": "16.8.7",
                    "versionStartIncluding": "16.8.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4338A4F9-0FE2-40F4-B184-86B9F5EF1EED",
                    "versionEndExcluding": "16.9.18",
                    "versionStartIncluding": "16.9.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7B6E2777-4D9B-4710-9575-250B04E1AE0C",
                    "versionEndIncluding": "16.10.4",
                    "versionStartIncluding": "16.10.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F1265006-B9CB-4E89-B6E8-F9EC1D6C7405",
                    "versionEndExcluding": "16.11.11",
                    "versionStartIncluding": "16.11.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6C72810F-D156-49CE-A325-7E6A63C9E4A3",
                    "versionEndExcluding": "17.0.7",
                    "versionStartIncluding": "17.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A930E247-0B43-43CB-98FF-6CE7B8189835",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
                    "matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "descriptions": [
          {
            "lang": "en",
            "value": ".NET and Visual Studio Remote Code Execution Vulnerability"
          },
          {
            "lang": "es",
            "value": "Una vulnerabilidad de Ejecuci\u00f3n de C\u00f3digo Remota en .NET y Visual Studio"
          }
        ],
        "id": "CVE-2022-24512",
        "lastModified": "2023-12-21T01:43:55.993",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 6.8,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": true
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 6.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 3.4,
              "source": "secure@microsoft.com",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 6.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 3.4,
              "source": "nvd@nist.gov",
              "type": "Secondary"
            }
          ]
        },
        "published": "2022-03-09T17:15:15.737",
        "references": [
          {
            "source": "secure@microsoft.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24512"
          }
        ],
        "sourceIdentifier": "secure@microsoft.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}