Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Are there plans to update WireMock.Net to latest .NET 5.0, .NET Core 3.1 or .NET Core 2.1 to fix security vulnerability? #697

Closed
jagudelo2us opened this issue Dec 1, 2021 · 3 comments
Labels

Comments

@jagudelo2us
Copy link

Fix install the latest version of .NET 5.0, .NET Core 3.1 or .NET Core 2.1

Currently, you are using
System.Text.Encodings.Web 4.5.0 NVD CVE-2021-26701 and
Microsoft.AspNetCore 2.2.0 NVD CVE-2019-0548 CWE-19 Data Processing Errors

See the following link:
dotnet/announcements#178

@StefH
Copy link
Collaborator

StefH commented Dec 1, 2021

Hello @jagudelo2us,

The System.Text.Encodings.Web is fixed and new NuGet packages will be released today.

About Microsoft.AspNetCore ; I've to review that.

@jagudelo2us
Copy link
Author

Hello @jagudelo2us,

The System.Text.Encodings.Web is fixed and new NuGet packages will be released today.

About Microsoft.AspNetCore ; I've to review that.

Still seeing the same vulnerability even with WireMock.Net version 1.4.28. Do a search on your Visual Studio Solution Explorer for System.Text.Encodings.Web and Microsoft.AspNetCore.
See screenshot
SystemTextEncodingsWeb

@StefH
Copy link
Collaborator

StefH commented Feb 21, 2022

#728

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants