Vulnerabilities in pkg:nuget/Microsoft.Owin

{
  "schema_version" : "1.4.0",
  "id" : "GHSA-3rq8-h3gj-r5c6",
  "modified" : "2025-01-02T21:56:07Z",
  "published" : "2022-08-30T19:32:29Z",
  "aliases" : [ "CVE-2022-29117" ],
  "summary" : " .NET Denial of Service Vulnerability",
  "details" : "Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0 and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.\n\nA vulnerability exists in .NET 6.0, .NET 5.0 and .NET core 3.1 where a malicious client can manipulate cookies and cause a Denial of Service.\n\n### Affected software\n\n* Any .NET 6.0 application running on .NET 6.0.4 or earlier.\n* Any .NET 5.0 application running .NET 5.0.16 or earlier.\n* Any .NET Core 3.1 application running on .NET Core 3.1.24 or earlier.\n\n#### Affected packages\n\n**.NET Core 3.1**\n\n| Package name                                 | Affected versions | Patched versions |\n|---------------------------------------------------|-------------------|------------------|\n| Microsoft.Owin.Security.Cookies                   | <4.2.2            | 4.2.2             |\n| Microsoft.Owin.Security                           | <4.2.2            | 4.2.2             |\n| Microsoft.AspNetCore.App.Runtime.win-x64          | >=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-x64        | >=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.win-x86          | >=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.osx-x64          | >=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-x64   | >=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-arm64      | >=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-arm        | >=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.win-arm64        | >=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.win-arm          | >=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | >=3.0.0,3.1.24    | 3.1.25           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm   | >=3.0.0,3.1.24    | 3.1.25           |\n\n**.NET 5.0**\n\n| Affected packages                                 | Affected versions | Patched versions |\n|---------------------------------------------------|-------------------|------------------|\n| Microsoft.Owin.Security.Cookies                   | < 4.2.2            | 4.2.2             |\n| Microsoft.AspNetCore.App.Runtime.win-x64          | >=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-x64        | >=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.win-x86          | >=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.osx-x64          | >=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-x64   | >=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-arm64      | >=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-arm        | >=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.win-arm64        | >=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.win-arm          | >=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | >=5.0.0,5.0.16    | 5.0.17           |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm   | >=5.0.0,5.0.16    | 5.0.17           |\n\n**.NET 6.0**\n\n| Affected packages                                 | Affected versions | Patched versions |\n|---------------------------------------------------|-------------------|------------------|\n| Microsoft.Owin.Security.Cookies                   | <4.2.2            | 4.2.2             |\n| Microsoft.AspNetCore.App.Runtime.win-x64          | >=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-x64        | >=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.win-x86          | >=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.osx-x64          | >=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-x64   | >=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-arm64      | >=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-arm        | >=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.win-arm64        | >=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.win-arm          | >=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.osx-arm64        | >=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | >=6.0.0,6.0.4     | 6.0.5            |\n| Microsoft.AspNetCore.App.Runtime.linux-musl-arm   | >=6.0.0,6.0.4     | 6.0.5            |\n\n\n### Patches\n\n* If you're using .NET Core 6.0, you should download and install Runtime 6.0.5 or SDK 6.0.105 (for Visual Studio 2022 v17.0) or SDK 6.0.203 (for Visual Studio 2022 v17.1) from https://dotnet.microsoft.com/download/dotnet-core/6.0.\n\n* If you're using .NET 5.0, you should download and install Runtime 5.0.17 or SDK 5.0.214 (for Visual Studio 2019 v16.9) or SDK 5.0.408 (for Visual Studio 2011 v16.11) from https://dotnet.microsoft.com/download/dotnet-core/5.0.\n\n* If you're using .NET Core 3.1, you should download and install Runtime 3.1.25 or SDK 3.1.419 (for Visual Studio 2019 v16.9 or Visual Studio 2011 16.11 or Visual Studio 2022 17.0 or Visual Studio 2022 17.1 ) from https://dotnet.microsoft.com/download/dotnet-core/3.1.\n\n.NET 6.0, .NET 5.0 and .NET Core 3.1 updates are also available from Microsoft Update. To access this either type \"Check for updates\" in your Windows search, or open Settings, choose Update & Security and then click Check for Updates.\n\n#### Other Details\n\n- Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/220\n- An Issue for this can be found at https://github.com/dotnet/aspnetcore/issues/41608\n- MSRC details for this can be found at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29117\n",
  "severity" : [ {
    "type" : "CVSS_V3",
    "score" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
  } ],
  "affected" : [ {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.win-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.25"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 3.1.24"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.Owin.Security.Cookies"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "0"
      }, {
        "fixed" : "4.2.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.win-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.17"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 5.0.16"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.Owin"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "0"
      }, {
        "fixed" : "4.2.2"
      } ]
    } ]
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.win-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.5"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 6.0.4"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.25"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 3.1.24"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.17"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 5.0.16"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.5"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 6.0.4"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.win-x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.25"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 3.1.24"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.win-x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.17"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 5.0.16"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.win-x86"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.5"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 6.0.4"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.osx-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.25"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 3.1.24"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.osx-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.17"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 5.0.16"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.osx-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.5"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 6.0.4"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-musl-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.25"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 3.1.24"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-musl-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.17"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 5.0.16"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-musl-x64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.5"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 6.0.4"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.25"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 3.1.24"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.17"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 5.0.16"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.5"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 6.0.4"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.25"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 3.1.24"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.17"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 5.0.16"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.5"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 6.0.4"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.win-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.25"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 3.1.24"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.win-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.17"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 5.0.16"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.win-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.5"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 6.0.4"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.win-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.25"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 3.1.24"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.win-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.17"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 5.0.16"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.win-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.5"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 6.0.4"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.25"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 3.1.24"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.17"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 5.0.16"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.5"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 6.0.4"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-musl-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "3.0.0"
      }, {
        "fixed" : "3.1.25"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 3.1.24"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-musl-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "5.0.0"
      }, {
        "fixed" : "5.0.17"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 5.0.16"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.linux-musl-arm"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.5"
      } ]
    } ],
    "database_specific" : {
      "last_known_affected_version_range" : "<= 6.0.4"
    }
  }, {
    "package" : {
      "ecosystem" : "NuGet",
      "name" : "Microsoft.AspNetCore.App.Runtime.osx-arm64"
    },
    "ranges" : [ {
      "type" : "ECOSYSTEM",
      "events" : [ {
        "introduced" : "6.0.0"
      }, {
        "fixed" : "6.0.5"
      } ]
    } ]
  } ],
  "references" : [ {
    "type" : "WEB",
    "url" : "https://github.com/dotnet/aspnetcore/security/advisories/GHSA-3rq8-h3gj-r5c6"
  }, {
    "type" : "ADVISORY",
    "url" : "https://nvd.nist.gov/vuln/detail/CVE-2022-29117"
  }, {
    "type" : "PACKAGE",
    "url" : "https://github.com/dotnet/aspnetcore"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5FPEQ6BTYRGTS6IYCDTZW6YF5HLQ3BY"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNXQL7EZORGU4PZCPJ5EPQ4P7IEY3ZZO"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IBYSBUDJYQ76HK4TULXVIIPCKK2U6WDB"
  }, {
    "type" : "WEB",
    "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W5FPEQ6BTYRGTS6IYCDTZW6YF5HLQ3BY"
  }, {
    "type" : "WEB",
    "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29117"
  } ],
  "database_specific" : {
    "cwe_ids" : [ "CWE-400" ],
    "severity" : "HIGH",
    "github_reviewed" : true,
    "github_reviewed_at" : "2022-08-30T19:32:29Z",
    "nvd_published_at" : "2022-05-10T21:15:00Z"
  }
}