9.9
CVSS V3
Status
Impact
The dotnet-bootstrap package is used to build the dotnet package and is not meant to be installed in any image. The version of .NET shipped in the dotnet-bootstrap package is a version lower than the .NET version shipped in the dotnet package. This is due to how the dotnet build process is done as it needs to reference the previous version of .NET in order to validate that the build is done correctly and maintains API compatibility in the dotnet package. The .NET version shipped in the dotnet-bootstrap package does not reflect what is shipped in the dotnet package.
Status