GHSA-gxg8-5rwf-cg43: Duplicate Advisory: Microsoft Security Advisory CVE-2026-114147 - ASP.NET Core Denial of Service Vulnerability

Q: Should this advisory be used to track remediation?

No. This advisory was withdrawn as a duplicate; track the canonical advisory GHSA-wr8v-9x5q-ggcm instead.

Q: Does this record identify affected package versions or mitigations?

No affected versions, configuration details, or temporary mitigations are provided in this withdrawn record.

Published Nov 10, 2026

Updated

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-wr8v-9x5q-ggcm. This link is maintained to preserve external references.

Original Description Missing release of memory after effective lifetime in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Affected Software

1 affected component

nuget/microsoft.aspnetcore.signalr.stackexchangeredis>=8.0.0-preview.1.23112.2<=8.0.33

Event History

Nov 10, 2026

Advisory Published

via GitHub·09:32 PM

Data Sourced

via GitHub·09:32 PM

DescriptionSeverityWeaknessAffected Software

Withdrawn

via GitHub·10:06 PM

Frequently Asked Questions

Should this advisory be used to track remediation?

No. This advisory was withdrawn as a duplicate; track the canonical advisory GHSA-wr8v-9x5q-ggcm instead.

Does this record identify affected package versions or mitigations?

No affected versions, configuration details, or temporary mitigations are provided in this withdrawn record.

GHSA-gxg8-5rwf-cg43: Duplicate Advisory: Microsoft Security Advisory CVE-2026-114147 - ASP.NET Core Denial of Service Vulnerability

Affected Software

Event History

Frequently Asked Questions

Should this advisory be used to track remediation?

Does this record identify affected package versions or mitigations?

Company

Resources

Contact

Frequently Asked Questions

Should this advisory be used to track remediation?

Does this record identify affected package versions or mitigations?