microsoft / dotnet

This repo is the official home of .NET on GitHub. It's a great starting point to find many .NET OSS projects from Microsoft and the community, including many that are part of the .NET Foundation.
https://devblogs.microsoft.com/dotnet/
MIT License
14.25k stars 2.2k forks source link

Question: Any Exposure to CVE-2023-38545? #1407

Open luizparente opened 9 months ago

luizparente commented 9 months ago

Hello, community!

Apologies if this is not the correct forum to ask. Feel free to direct me to the correct place if this thread does not belong here.

In light of the recent discovery of [CVE-2023-38545](https://curl.se/docs/CVE-2023-38545.html https://curl.se/docs/CVE-2023-38545.html), I was wondering if .NET is exposed in any way. Not sure if any of the API's use cURL behind the scenes (in particular, HttpClient) and, if so, if there is a way to address this in the short term.

Thanks, all.