Medium severity5.9NVD Advisory· Published Jun 8, 2021· Updated Jun 17, 2026

CVE-2021-31957

Description

ASP.NET Core Denial of Service Vulnerability

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
Microsoft.NETCore.App.RefNuGet	< 3.1.16	3.1.16
Microsoft.NETCore.App.RefNuGet	>= 5.0.0, < 5.0.7	5.0.7

Microsoft/Net
cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
Range: >=5.0,<=5.0.6
Microsoft/.net Core
cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*
Range: >=3.1,<=3.1.15
Microsoft/Visual Studio2 versions
cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*range: >=16.0,<=16.10
- cpe:2.3:a:microsoft:visual_studio_2019:8.10:*:*:*:*:macos:*:*
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
osv-coords3 versions
pkg:bitnami/dotnet pkg:bitnami/dotnet-sdk pkg:nuget/microsoft.netcore.app.ref
>= 5.0.0, < 5.0.7+ 2 more
- (no CPE)range: >= 5.0.0, < 5.0.7
- (no CPE)range: >= 5.0.0, < 5.0.7
- (no CPE)range: < 3.1.16