{"id":"GHSA-qhqf-ghgh-x2m4","summary":"High severity vulnerability that affects Microsoft.AspNetCore.Mvc","details":"See https://nvd.nist.gov/vuln/detail/CVE-2017-0249 & https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0249","aliases":["CVE-2017-0249"],"modified":"2023-11-08T03:58:40.185760Z","published":"2018-10-16T19:57:38Z","database_specific":{"nvd_published_at":"2017-05-12T14:29:00Z","cwe_ids":["CWE-20"],"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2020-06-16T21:52:02Z"},"references":[{"type":"WEB","url":"https://github.com/Aiko-IT-Systems/DisCatSharp/security/advisories/GHSA-wj4j-gr3f-cfh7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0249"},{"type":"WEB","url":"https://github.com/aspnet/Announcements/issues/239"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-qhqf-ghgh-x2m4"}],"affected":[{"package":{"name":"Microsoft.AspNetCore.Mvc","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.3"}]}],"versions":["1.1.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Core","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Core","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.3"}]}],"versions":["1.1.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"System.Net.Http","ecosystem":"NuGet","purl":"pkg:nuget/System.Net.Http"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.1"},{"fixed":"4.1.2"}]}],"versions":["4.1.1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"System.Net.Http","ecosystem":"NuGet","purl":"pkg:nuget/System.Net.Http"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.1"},{"fixed":"4.3.2"}]}],"versions":["4.3.1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"System.Text.Encodings.Web","ecosystem":"NuGet","purl":"pkg:nuget/System.Text.Encodings.Web"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.0.1"}]}],"versions":["4.0.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"System.Text.Encodings.Web","ecosystem":"NuGet","purl":"pkg:nuget/System.Text.Encodings.Web"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.3.1"}]}],"versions":["4.3.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"System.Net.Http.WinHttpHandler","ecosystem":"NuGet","purl":"pkg:nuget/System.Net.Http.WinHttpHandler"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.0.1"}]}],"versions":["4.0.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"System.Net.Http.WinHttpHandler","ecosystem":"NuGet","purl":"pkg:nuget/System.Net.Http.WinHttpHandler"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.3.1"}]}],"versions":["4.3.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"System.Net.Security","ecosystem":"NuGet","purl":"pkg:nuget/System.Net.Security"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.0.1"}]}],"versions":["4.0.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"System.Net.Security","ecosystem":"NuGet","purl":"pkg:nuget/System.Net.Security"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.3.1"}]}],"versions":["4.3.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"System.Net.WebSockets.Client","ecosystem":"NuGet","purl":"pkg:nuget/System.Net.WebSockets.Client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.0.1"}]}],"versions":["4.0.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"System.Net.WebSockets.Client","ecosystem":"NuGet","purl":"pkg:nuget/System.Net.WebSockets.Client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.3.1"}]}],"versions":["4.3.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Abstractions","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Abstractions"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Abstractions","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Abstractions"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.3"}]}],"versions":["1.1.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.ApiExplorer","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.ApiExplorer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.ApiExplorer","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.ApiExplorer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.3"}]}],"versions":["1.1.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Cors","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Cors"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Cors","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Cors"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.3"}]}],"versions":["1.1.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.DataAnnotations","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.DataAnnotations"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.DataAnnotations","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.DataAnnotations"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.3"}]}],"versions":["1.1.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Formatters.Json","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Formatters.Json"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Formatters.Json","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Formatters.Json"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.3"}]}],"versions":["1.1.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Formatters.Xml","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Formatters.Xml"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Formatters.Xml","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Formatters.Xml"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.3"}]}],"versions":["1.1.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Localization","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Localization"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Localization","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Localization"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.3"}]}],"versions":["1.1.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Razor.Host","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Razor.Host"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Razor.Host","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Razor.Host"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.3"}]}],"versions":["1.1.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Razor","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Razor"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.Razor","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.Razor"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.3"}]}],"versions":["1.1.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.TagHelpers","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.TagHelpers"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.TagHelpers","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.TagHelpers"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.3"}]}],"versions":["1.1.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.ViewFeatures","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.ViewFeatures"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.ViewFeatures","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.ViewFeatures"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.3"}]}],"versions":["1.1.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.WebApiCompatShim","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.WebApiCompatShim"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.0.4"}]}],"versions":["1.0.0","1.0.1","1.0.2","1.0.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"Microsoft.AspNetCore.Mvc.WebApiCompatShim","ecosystem":"NuGet","purl":"pkg:nuget/Microsoft.AspNetCore.Mvc.WebApiCompatShim"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.0"},{"fixed":"1.1.3"}]}],"versions":["1.1.0","1.1.1","1.1.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}},{"package":{"name":"DisCatSharp","ecosystem":"NuGet","purl":"pkg:nuget/DisCatSharp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"9.8.3"}]}],"versions":["9.5.8","9.5.8-nightly-00003","9.5.8-nightly-00004","9.5.8-nightly-00183","9.5.8-nightly-00184","9.6.0","9.6.0-nightly-00005","9.6.0-nightly-00008","9.6.0-nightly-00010","9.6.0-nightly-00011","9.6.1","9.6.1-nightly-00012","9.6.1-nightly-00015","9.6.1-nightly-00016","9.6.1-nightly-00017","9.6.1-nightly-00018","9.6.2","9.6.2-nightly-00019","9.6.2-nightly-00020","9.6.2-nightly-00022","9.6.2-nightly-00023","9.6.2-nightly-00025","9.6.2-nightly-00026","9.6.2-nightly-00027","9.6.2-nightly-00028","9.6.2-nightly-00029","9.6.2-nightly-00030","9.6.3-nightly-00034","9.6.3-nightly-00035","9.6.3-nightly-00036","9.6.3-nightly-00037","9.6.3-nightly-00038","9.6.3-nightly-00039","9.6.3-nightly-00041","9.6.3-nightly-00042","9.6.3-nightly-00043","9.6.3-nightly-00044","9.6.3-nightly-00045","9.6.3-nightly-00046","9.6.3-nightly-00047","9.6.3-nightly-00048","9.6.3-nightly-00049","9.6.3-nightly-00050","9.6.3-nightly-00051","9.7.0","9.7.0-nightly-00054","9.7.0-nightly-00055","9.7.0-nightly-00056","9.7.0-nightly-00057","9.7.0-nightly-00058","9.7.0-nightly-00059","9.8.0","9.8.0-nightly-00062","9.8.1-nightly-00063","9.8.1-nightly-00064","9.8.1-nightly-00066","9.8.1-nightly-00067","9.8.1-nightly-00068","9.8.1-nightly-00069","9.8.1-nightly-00070","9.8.2","9.8.2-nightly-00076","9.8.2-nightly-00077","9.8.2-nightly-00078","9.8.2-nightly-00079","9.8.2-nightly-00080","9.8.2-nightly-00081","9.8.2-nightly-00082","9.8.2-nightly-00083","9.8.2-nightly-00084","9.8.2-nightly-00085","9.8.2-nightly-00086","9.8.2-nightly-00087","9.8.2-nightly-00088","9.8.2-nightly-00089","9.8.2-nightly-00090","9.8.2-nightly-00091","9.8.2-nightly-00092","9.8.2-nightly-00095","9.8.2-nightly-00096","9.8.2-nightly-00098","9.8.3","9.8.3-nightly-00099","9.8.3-nightly-00100","9.8.3-nightly-00101","9.8.3-nightly-00102","9.8.3-nightly-00103","9.8.3-nightly-00104","9.8.3-nightly-00105","9.8.3-nightly-00106","9.8.3-nightly-00110","9.8.3-nightly-00111","9.8.3-nightly-00113","9.8.3-nightly-00114","9.8.3-nightly-00115","9.8.3-nightly-00116","9.8.3-nightly-00117","9.8.3-nightly-00118","9.8.3-nightly-00119","9.8.3-nightly-00121","9.8.3-nightly-00122","9.8.3-nightly-00123","9.8.3-nightly-00124","9.8.3-nightly-00125","9.8.3-nightly-00126","9.8.3-nightly-00127","9.8.3-nightly-00128","9.8.3-nightly-00129","9.8.3-nightly-00130","9.8.3-nightly-00131","9.8.3-nightly-00132","9.8.3-nightly-00133","9.8.3-nightly-00134","9.8.3-nightly-00135","9.8.3-nightly-00136","9.8.3-nightly-00137","9.8.3-nightly-00138","9.8.3-nightly-00139","9.8.3-nightly-00140","9.8.3-nightly-00141","9.8.3-nightly-00142","9.8.3-nightly-00143","9.8.3-nightly-00146","9.8.3-nightly-00147","9.8.3-nightly-00149"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-qhqf-ghgh-x2m4/GHSA-qhqf-ghgh-x2m4.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"}]}