New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

System.text.json vulnerability on v5.0.1 #234

Closed

yborektsioglou opened this issue Oct 18, 2024 · 1 comment

Contributor

yborektsioglou commented Oct 18, 2024

Right now v5.0.1 uses Microsoft.Extensions.DependencyModel v8.0.1.
This package has a dependency to system.text.json v8.0.4 which is marked as vulnerable CVE-2024-43485

Solution would be to upgrade Microsoft.Extensions.DependencyModel to v8.0.2

yborektsioglou mentioned this issue

Update DependencyModel to resolve system.text.json vulnerability #236

Merged

mikkelbu commented Nov 8, 2024

Seems like this was fixed in 5.0.2 by #236

yborektsioglou closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment