Related Vulnerabilities: CVE-2021-31957  

A denial of service vulnerability exists in .NET 5.0 before Runtime 5.0.7 and SDK 5.0.204 as well as .NET Core 3.1 before Runtime 3.1.16 and SDK 3.1.116 in ASP.NET.

Severity Medium

Remote Yes

Type Denial of service

Description

A denial of service vulnerability exists in .NET 5.0 before Runtime 5.0.7 and SDK 5.0.204 as well as .NET Core 3.1 before Runtime 3.1.16 and SDK 3.1.116 in ASP.NET.

AVG-2047 dotnet-runtime-3.1, dotnet-sdk-3.1 3.1.15.sdk115-1 Medium Vulnerable

AVG-2046 dotnet-runtime, dotnet-sdk 5.0.6.sdk203-1 Medium Vulnerable

https://github.com/dotnet/announcements/issues/189