Summary
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability
Advisory details
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-8cp2-47hg-mfgh. This link is maintained to preserve external references.
Original Description
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
References
Related vulnerabilities
All Supply chain →- HIGHCVE-2026-91979
Vikunja: Denial of service via decompression bomb in the data import
- HIGHCVE-2026-107227
AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled
- MEDIUMCVE-2026-105747
Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)
- MEDIUMGHSA-f4ch-vxwc-3p2m
Duplicate Advisory: Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)
- HIGHGHSA-cjcg-cxmh-9wcr
Praxis affected by HTTP/2 Bomb
- HIGHGHSA-mcm9-63f2-9j32
devalue: Repeated primitive strings cause quadratic expansion in uneval