GHSA-fgfw-85w4-gx99: Duplicate Advisory: Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability

Published Nov 10, 2026

Updated

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-q6jf-24jf-m3cg. This link is maintained to preserve external references.

Original Description Insertion of sensitive information into log file in .NET Aspire allows an authorized attacker to disclose information locally.

Affected Software

2 affected components

nuget/aspire.cli>=13.2.0<13.6.5

nuget/aspire.cli>=13.2.0

Event History

Nov 10, 2026

Advisory Published

via GitHub·09:33 PM

Data Sourced

via GitHub·09:33 PM

DescriptionSeverityWeaknessAffected Software

Withdrawn

via GitHub·10:30 PM

Frequently Asked Questions

Should this advisory be tracked independently?

No. This advisory was withdrawn as a duplicate of GHSA-q6jf-24jf-m3cg and is retained only to preserve external references. Track the duplicate advisory for the authoritative vulnerability information and remediation guidance.

What access would an attacker need to exploit the original issue?

The original description states that exploitation requires an authorized attacker and occurs locally. The affected software listed is the NuGet package aspire.cli.

GHSA-fgfw-85w4-gx99: Duplicate Advisory: Microsoft Security Advisory CVE-2026-120792 - Aspire Information Disclosure Vulnerability

Affected Software

Event History

Frequently Asked Questions

Should this advisory be tracked independently?

What access would an attacker need to exploit the original issue?

Company

Resources

Contact

Frequently Asked Questions

Should this advisory be tracked independently?

What access would an attacker need to exploit the original issue?