Tag

dotnet-kestrel-denial-of-service

Safeguard articles tagged "dotnet-kestrel-denial-of-service" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

CVE-2022-29148: Denial of service in .NET Kestrel HTTP stack

CVE-2022-21986 is a CVSS 7.5 denial-of-service flaw in .NET Kestrel's HTTP/2 and HTTP/3 handling. Here's what's affected and how to remediate it.

Sep 18, 20257 min read