The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service (DoS) vulnerability caused by CPU exhaustion. When serializing a specially crafted "array-like" object (an object that inherits from Array.prototype but has a very large length property), the process enters an intensive loop that consumes 100% CPU and hangs indefinitely. This issue has been patched in version 7.0.5.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade dotnet-templates-8.0Upgrade dotnet-apphost-pack-8.0Upgrade dotnet-runtime-dbg-8.0Upgrade dotnet-sdk-8.0Upgrade dotnet-sdk-dbg-8.0Upgrade dotnet-sdk-8.0-source-built-artifactsUpgrade aspnetcore-targeting-pack-8.0Upgrade aspnetcore-runtime-8.0Upgrade dotnet-hostfxr-8.0Upgrade dotnet-runtime-8.0Upgrade dotnet-targeting-pack-8.0Upgrade aspnetcore-runtime-dbg-8.0 | May 28, 2026 | May 27, 2026 |
| Oracle_linux | — | Upgrade dotnet-sdk-8.0-source-built-artifactsUpgrade aspnetcore-targeting-pack-8.0Upgrade dotnet-templates-8.0Upgrade dotnet-apphost-pack-8.0Upgrade dotnet-sdk-dbg-8.0Upgrade dotnet-targeting-pack-8.0Upgrade aspnetcore-runtime-8.0Upgrade dotnet-runtime-dbg-8.0Upgrade dotnet-hostfxr-8.0Upgrade aspnetcore-runtime-dbg-8.0Upgrade dotnet-runtime-8.0Upgrade dotnet-sdk-8.0 | May 29, 2026 | Mar 31, 2026 |
| Redhat_linux | — | Upgrade dotnet8.0-debuginfoUpgrade dotnet-sdk-8.0Upgrade dotnet-hostfxr-8.0Upgrade dotnet-runtime-8.0-debuginfoUpgrade dotnet-apphost-pack-8.0Upgrade aspnetcore-runtime-8.0Upgrade dotnet-apphost-pack-8.0-debuginfoUpgrade dotnet-targeting-pack-8.0Upgrade aspnetcore-runtime-dbg-8.0Upgrade dotnet-runtime-8.0Upgrade aspnetcore-targeting-pack-8.0Upgrade dotnet8.0-debugsourceUpgrade dotnet-hostfxr-8.0-debuginfoUpgrade dotnet-runtime-dbg-8.0Upgrade dotnet-sdk-8.0-source-built-artifactsUpgrade dotnet-sdk-8.0-debuginfoUpgrade dotnet-templates-8.0No solution existsUpgrade dotnet-sdk-dbg-8.0 | Jun 3, 2026 | Mar 31, 2026 |
| Rocky_linux | — | Upgrade dotnet-templates-8.0Upgrade dotnet-apphost-pack-8.0-debuginfoUpgrade dotnet-sdk-8.0-debuginfoUpgrade dotnet-sdk-dbg-8.0Upgrade dotnet-hostfxr-8.0-debuginfoUpgrade dotnet-apphost-pack-8.0Upgrade dotnet-sdk-8.0-source-built-artifactsUpgrade dotnet-runtime-8.0-debuginfoUpgrade aspnetcore-targeting-pack-8.0Upgrade dotnet-targeting-pack-8.0Upgrade dotnet-sdk-8.0Upgrade dotnet-hostfxr-8.0Upgrade dotnet-runtime-dbg-8.0Upgrade aspnetcore-runtime-dbg-8.0Upgrade aspnetcore-runtime-8.0Upgrade dotnet8.0-debuginfoUpgrade dotnet8.0-debugsourceUpgrade dotnet-runtime-8.0 | Jun 1, 2026 | May 30, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub