MICROSOFT.ASPNETCORE.APP.RUNTIME.LINUX-ARM · GHSA-wrm2-c2h2-4w82 · Runtime
NO FIX YET · SEE WHAT TO DO
ASP.NET Core has an inefficient algorithm that an unauthorized attacker can trigger over the network to make the service unavailable. This advisory is withdrawn as a duplicate of GHSA-r3qf-p3jm-8h4p, so the live entry is that one.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running ASP.NET Core 8.0 on Linux ARM builds within the listed range are the ones this entry describes. Because the advisory is withdrawn as a duplicate, the authoritative scope and fixed version should be taken from GHSA-r3qf-p3jm-8h4p. Teams on other runtimes or versions outside the range can skip it.
Not affected if outside-affected-range
Who cares aspnet-core, dotnet, linux-arm, self-hosted
dotnet --list-runtimes>= 8.0.0-preview.1.23112.2, <= 8.0.33This advisory has been withdrawn because it is a duplicate of GHSA-r3qf-p3jm-8h4p. This link is maintained to preserve external references.
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
GitHub Advisory Database, CC-BY 4.0. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.