CVE-2024-21319
MediumAdvisory
Published 9 Jan 2024In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.8
- base score, highest
- EPSS
- 0.029
- 86th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 42
- of 17,781 indexed, latest versions
- Container images
- 54
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Microsoft ASP.NET Core project templates vulnerable to denial of service
Carried by container images the latest versions of 42 of 17,781 indexed charts deploy, on 54 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| System.IdentityModel.Tokens.Jwtnuget | 5.1.4.216, 5.2.1, 5.3.0, 5.4.0+12 more | 5.7.0, 6.34.0 | 53 |
| Microsoft.IdentityModel.JsonWebTokensnuget | 5.3.0, 5.4.0, 5.5.0, 5.6.0+11 more | 5.7.0, 6.34.0 | 52 |
- OSV records
- GHSA-59j7-ghrg-fj52
- Also known as
- BIT-dotnet-2024-21319, BIT-dotnet-sdk-2024-21319
Charts affected
42 by stars
Container images carrying it
54 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| kodekloud/ | 741e3aaaa812 | System.IdentityModel.Tokens.Jwt | 5.7.0 | 4 |
| linuxserver/ | 4d9df314875e | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 4 |
| ghcr.io/ | 8f7551205fbd | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 2 |
| ghcr.io/ | 1f19eb5e0f42 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 2 |
| mcr.microsoft.com/ | 902628a8be89 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 2 |
| adwerx/ | 840d2b078682 | System.IdentityModel.Tokens.Jwt | 5.7.0 | 1 |
| aidasi/ | 838b5e2080bc | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| aidasi/ | 5ce8dbff7fdc | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 5.7.0 5.7.0 | 1 |
| aidasi/ | d433285c7d5a | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| beubi/ | a02c2e200920 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 5.7.0 5.7.0 | 1 |
| btungut/ | 4a072e2edf71 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| digitsy/ | f91d7f56b55d | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 5.7.0 5.7.0 | 1 |
| fedodo/ | 28dada8e3216 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| fedodo/ | 8f8eb7a1207e | Microsoft.IdentityModel.JsonWebTokens | 6.34.0 | 1 |
| hecrom/ | 92e5588d55f3 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| hecrom/ | 203ee6853a27 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| hecrom/ | c502a4b758f0 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| ironmansoftware/ | 1943c73cce31 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| linuxserver/ | 2fbb21fb4903 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 5.7.0 5.7.0 | 1 |
| linuxserver/ | 2f7a7b7a0ca6 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| linuxserver/ | 02bc962946fe | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| linuxserver/ | 82172b363f9e | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| loeken/ | a24409d3846d | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| loeken/ | b940520a2236 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| lumenvox/ | 147854a3c916 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 5.7.0 5.7.0 | 1 |
| lumenvox/ | 79428add7f38 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 5.7.0 5.7.0 | 1 |
| lumenvox/ | 17fbce1a8bc6 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 5.7.0 5.7.0 | 1 |
| lumenvox/ | e2e5abe27abc | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 5.7.0 5.7.0 | 1 |
| lumenvox/ | 7a9ffdc2178a | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 5.7.0 5.7.0 | 1 |
| lumenvox/ | 8b74f9d3ba09 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 5.7.0 5.7.0 | 1 |
| nethermind/ | 15517708c3b6 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| nicolasdorier/ | ee70dba03ec2 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 5.7.0 5.7.0 | 1 |
| simpleidserver/ | 53c159ea49ca | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 5.7.0 5.7.0 | 1 |
| simpleidserver/ | 9007e742dd48 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| siscc/ | bb1e9a45b6fa | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 5.7.0 5.7.0 | 1 |
| siscc/ | 00d73f06edcf | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 5.7.0 5.7.0 | 1 |
| zbalogh/ | 09a51b809674 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| ghcr.io/ | aa774b3c3425 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| ghcr.io/ | 1989718e9fce | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| ghcr.io/ | b948300560bb | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| ghcr.io/ | c863aa9875fa | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| ghcr.io/ | 4273dfaf0295 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| ghcr.io/ | 8b9f2138ec50 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| ghcr.io/ | c77d84ebf7a6 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| ghcr.io/ | 8d299e59fce7 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| ghcr.io/ | 27ffdcc8a937 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| ghcr.io/ | 22ce496c67d7 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| ghcr.io/ | 7e53010dda55 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| ghcr.io/ | 206a9bee17a8 | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |
| ghcr.io/ | dd5ce454072e | Microsoft.IdentityModel.JsonWebTokens System.IdentityModel.Tokens.Jwt | 6.34.0 6.34.0 | 1 |