1 line
1.9 KiB
JSON
1 line
1.9 KiB
JSON
{"schema_version":"1.9.2","id":"GHSA-2f3w-v7f5-vpgx","published":"2026-11-10T21:33:09Z","modified":"2026-11-12T17:28:50.500250748Z","withdrawn":"2026-11-12T17:17:35Z","summary":"Duplicate Advisory: Microsoft Security Advisory CVE-2026-118740 - Aspire Security Feature Bypass Vulnerability","details":"## Duplicate Advisory\n\nThis advisory has been withdrawn because it is a duplicate of GHSA-4g86-54fm-h9h8. This link is maintained to preserve external references.\n\n## Original Description\nMissing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.","affected":[{"package":{"name":"Aspire.Dashboard.Sdk.linux-x64","ecosystem":"NuGet","purl":"pkg:nuget/Aspire.Dashboard.Sdk.linux-x64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["13.0.0","13.0.1","13.0.2","13.1.0","13.1.1","13.1.2","13.1.3","13.2.0","13.2.1","13.2.2","13.2.3","13.2.4","13.3.0","13.3.1","13.3.2","13.3.3","13.3.4","13.3.5","13.4.0","13.4.1","13.4.2","13.4.3","13.4.4","13.4.5","13.4.6","13.5.0","13.5.1","13.5.2","13.5.3","13.5.4","13.6.0","13.6.1","13.6.2","13.6.3","13.6.4","13.6.5","8.0.0","8.0.1","8.0.2","8.1.0","8.2.0","8.2.1","8.2.2","9.0.0","9.1.0","9.2.0","9.2.1","9.3.0","9.3.1","9.4.0","9.4.1","9.4.2","9.5.0","9.5.1","9.5.2"],"database_specific":{"last_known_affected_version_range":"< 13.6.5","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/11/GHSA-2f3w-v7f5-vpgx/GHSA-2f3w-v7f5-vpgx.json"}}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118740"},{"type":"WEB","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118740"}],"database_specific":{"cwe_ids":["CWE-862"],"github_reviewed":true,"github_reviewed_at":"2026-11-12T17:17:35Z","nvd_published_at":"2026-11-10T19:19:50Z","severity":"CRITICAL"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"}]} |