Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update vulnerable NuGet packages (OSOE-917) #883

Closed
Piedone opened this issue Nov 17, 2024 · 0 comments · Fixed by #890
Closed

Update vulnerable NuGet packages (OSOE-917) #883

Piedone opened this issue Nov 17, 2024 · 0 comments · Fixed by #890
Assignees

Comments

@Piedone
Copy link
Member

Piedone commented Nov 17, 2024

VS 17.12.0 now shows transitive package vulnerabilities too, in addition to System.Text.Json v8.0.4`, which we directly use, being vulnerable too:

{129ACE7A-03F5-45DB-A19B-3FB54A068BA4}

Update each package to the minimal fixed versions, or the highest patch version of the linage we use (or reference the transitive ones' fixed versions in the affected projects, with a comment on why it's necessary).

Jira issue

@github-actions github-actions bot changed the title Update vulnerable NuGet packages Update vulnerable NuGet packages (OSOE-917) Nov 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant