7.5
High
CVE-2026-45646 Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service…
Description
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AspNet.OData 7.0 | 7.0.0 → < 7.8.0 | 7.8.0 |
| AspNetCore.OData 9.0 | 9.0.0 → latest | No fix stated |