Add missing section to .NET 8 cve.md

dotnet · Feb 29, 2024 · 7610cf7 · 7610cf7
1 parent 8fb2912
commit 7610cf7
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/release-notes/8.0/cve.md b/release-notes/8.0/cve.md
@@ -7,6 +7,9 @@ Your app needs to be on the latest .NET 8 patch version to be secure. The longer
 ## Which CVEs apply to my app?
 
 Your app may be vulnerable to the following published security [CVEs](https://www.cve.org/) if you are using the given version or older.
+- 8.0.2 (February 2024)
+  - [CVE-2024-21386 | .NET Denial of Service Vulnerability](https://github.com/dotnet/announcements/issues/295)
+  - [CVE-2024-21404 | .NET Denial of Service Vulnerability](https://github.com/dotnet/announcements/issues/296)
 - 8.0.1 (January 2024)
   - [CVE-2024-0056 | .NET Information Disclosure Vulnerability](https://github.com/dotnet/announcements/issues/292)
   - [CVE-2024-0057 | .NET Security Feature Bypass Vulnerability](https://github.com/dotnet/announcements/issues/291)