GHSA-v3f6-m9j2-437p

Summary

Duplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Severity

medium

CVSS

5.9

CWE

CWE-409

Published

2026-09-08

Updated

2026-09-08

Advisory details

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-8cp2-47hg-mfgh. This link is maintained to preserve external references.

Original Description

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

References

• https://github.com/advisories/GHSA-v3f6-m9j2-437p
• https://nvd.nist.gov/vuln/detail/CVE-2026-69304
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69304

Related advisories

• CVE-2026-69304 — medium · NuGet/Microsoft.AspNetCore.Server.IISIntegration
• CVE-2026-84382 — high · PyPI/httpx2
• CVE-2026-73232 — high · Go/github.com/ffuf/ffuf/v2
• CVE-2026-54556 — high · Maven/org.http4s:http4s-ember-core_2.12
• CVE-2026-53659 — high · Maven/org.http4k:http4k-core
• CVE-2026-59939 — high · PyPI/httplib2
• CVE-2026-59932 — high · Packagist/phpoffice/phpspreadsheet
• CVE-2026-56755 — high · Go/code.gitea.io/gitea

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity