Skip to content

Releases: vb2ae/OpenWeatherMap.Standard

Release 2.0

06 Nov 16:43
@vb2ae vb2ae
V2.0
4900c2c
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
Release 2.0 Latest
Latest

Support Air Pollution API and add GeoLocation

What's Changed

Full Changelog: V1.7...V2.0

Contributors

vb2ae
Assets 2
Loading
0 Join discussion

V1.7

25 Jun 18:07
@vb2ae vb2ae
V1.7
a6840a0
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
V1.7

Fixes security issue

Newtonsoft.Json prior to version 13.0.1 is vulnerable to Insecure Defaults due to improper handling of StackOverFlow exception (SOE) whenever nested expressions are being processed. Exploiting this vulnerability results in Denial Of Service (DoS), and it is exploitable when an attacker sends 5 requests that cause SOE in time frame of 5 minutes. This vulnerability affects Internet Information Services (IIS) Applications.

References
JamesNK/Newtonsoft.Json#2457
JamesNK/Newtonsoft.Json#2462
JamesNK/Newtonsoft.Json@7e77bbe
https://alephsecurity.com/2018/10/22/StackOverflowException/
https://alephsecurity.com/vulns/aleph-2018004
https://security.snyk.io/vuln/SNYK-DOTNET-NEWTONSOFTJSON-2774678

Assets 3
Loading
0 Join discussion