Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

Affected products:
- ASP.NET Core Runtime (release 10.0): 10.0.0 - 10.0.12; fixed 10.0.13
- ASP.NET Core Runtime (release 8.0): 8.0.0 - 8.0.31; fixed 8.0.32
- ASP.NET Core Runtime (release 11.0): 11.0.0-preview.1 - 11.0.0-rc.1; fixed 11.0.0-rc.2
- ASP.NET Core Runtime (release 9.0): 9.0.0 - 9.0.20; fixed 9.0.21