Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump to Microsoft.DotNet.Arcade.MSBuild.Xcopy 17.10.0-pre4.0 (#10602)
Fixes # CG alerts CVE-2024-29415, CVE-2024-28863, CVE-2023-42282 which are resulted from xcopy-msbuild 17.8.5. Context xcopy-msbuild (Microsoft.DotNet.Arcade.MSBuild.Xcopy) higher version > 17.9.6 removed NodeJs modules under MSBuild\Microsoft\VisualStudio\NodeJs. The vulnerability didn't exist. Changes Made Bump Microsoft.DotNet.Arcade.MSBuild.Xcopy to 17.10.0-pre4.0 which is the latest available.
- Loading branch information