GHSA-cgpw-2gph-2r9g Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core

• NuGet Microsoft.AspNetCore.Server.Kestrel.Core: >= 2.0.0, < 2.0.4 → fixed in 2.0.4 • NuGet Microsoft.AspNetCore.All: >= 2.0.0, < 2.0.9 → fixed in 2.0.9 • NuGet Microsoft.AspNetCore.App: >= 2.1.0, < 2.1.2 → fixed in 2.1.2 • NuGet Microsoft.AspNetCore.Server.Kestrel.Core: >= 2.1.0, < 2.1.2 → fixed in 2.1.2 • NuGet Microsoft.AspNetCore.All: >= 2.1.0, < 2.1.2 → fixed in 2.1.2

Microsoft is aware of a denial of service vulnerability in ASP.NET Core when a malformed request is terminated. An attacker who successfully exploited this vulnerability could cause a denial of service attack. The update addresses the vulnerability by correcting how ASP.NET Core handles such requests.