Microsoft.NETCore.App (NuGet)

Advisories

Latest version

—

License

—

OpenSSF Scorecard

—

How to fix

Upgrading to 2.1.29 or later clears every advisory below that has a fix.

Upgrade commands

dotnet

dotnet add package Microsoft.NETCore.App --version 2.1.29

Known vulnerabilities

Advisory	Severity	Affected	Fixed in
GHSA-vgwq-hfqc-58wv .NET Core Information Disclosure Vulnerability	Medium EPSS 2.07%	`>= 2.1.0, < 2.1.29`	`2.1.29`
GHSA-3gp9-h8hw-pxpw Denial of service in .NET core	Medium EPSS 3.34%	`>= 2.1.0, < 2.1.25`	`2.1.25`
GHSA-3w5p-jhp5-c29q .NET Core & .NET Framework Denial of Service Vulnerability	High EPSS 6.46%	`>= 2.1.0, < 2.1.18`	`2.1.18`
CVE-2020-1147 .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability Known exploited	High EPSS 95.80%	`>= 2.1.0, < 2.1.20`	`2.1.20`
CVE-2020-1147 .NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability Known exploited	High EPSS 95.80%	`>= 2.1.0, < 2.1.20`	`2.1.20`

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor