Microsoft.NETCore.App is a set of .NET API's that are included in the default .NET Core application model.
Affected versions of this package are vulnerable to Domain-Spoofing. It causes the meaning of a URI to change when International Domain Name encoding is applied. An attacker who successfully exploited the vulnerability could redirect a URI.
Microsoft.NETCore.App to version 2.1.8, 2.2.2 or higher.