MEDIUMCVSS 5.9Vulnerability

GHSA-v3f6-m9j2-437p

### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8cp2-47hg-mfgh. This link is maintained to preserve external references. ### Original Description Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Properties

Severity
medium
Summary
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability
Cvss score
5.9
Ghsa published
2026-09-08T18:32:21Z
Source url
https://github.com/advisories/GHSA-v3f6-m9j2-437p
Ghsa updated
2026-09-08T21:14:34Z
Ghsa id
GHSA-v3f6-m9j2-437p
Cve id
GHSA-v3f6-m9j2-437p
Cvss vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
In Signal since
initial import (Sep 2026)
Name
GHSA-v3f6-m9j2-437p
Is ghsa only
true

Related Entities (3)

AFFECTS (1)

→[Software]nuget/Microsoft.AspNetCore.Server.IISIntegration

HAS_WEAKNESS (1)

→[Weakness]Improper Handling of Highly Compressed Data (Data Amplification)

VULNERABLE_TO (1)

←[Software]nuget/Microsoft.AspNetCore.Server.IISIntegration

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
GHSA-v3f6-m9j2-437p (CVSS 5.9) — Ninja Signal Threat Intelligence | Ninja Signal