CVE-2022-21986: .NET Denial of Service Vulnerability

What .NET component is affected by this denial of service vulnerability?

This vulnerability affects applications that utilize the Kestrel web server when processing certain HTTP/2 and HTTP/3 requests.