MEDIUMCVSS 5.9

GHSA-v3f6-m9j2-437p

Duplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Published: 2026-09-08
Modified: 2026-09-08
Sources: github-advisory

Summary

### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8cp2-47hg-mfgh. This link is maintained to preserve external references. ### Original Description Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
NuGet	Microsoft.AspNetCore.Server.IISIntegration	—	11.0.0-rc.1, 8.0.31, 9.0.20, 10.0.12

Remediation: Upgrade to 11.0.0-rc.1 or later.

References

https://github.com/advisories/GHSA-v3f6-m9j2-437p

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.