Vulnerability: System.Text.RegularExpressions CVE-2019-0820

[TimothyMothra]

Customer reported a vulnerability.
I have not yet confirmed where in our SDK this comes from.
Need more time to investigate.

May I suggest to also update the dependency System.Text.RegularExpressions from 4.3.0 to 4.3.1 because 4.3.0 has this known vulnerability:
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2019-0820

Originally posted by @vDiBo in #2392 (comment)

[TimothyMothra]

@vDiBo can you share what SDKs you're taking a dependency on? this will help me find where this comes from.

[vDiBo]

Hi Timothy, This is the dependency chain as our dependency management software (Black Duck) displays it: Microsoft.ApplicationInsights.AspNetCore/2.18.0 » Microsoft.ApplicationInsights.WindowsServer/2.18.0 » System.Runtime.Serialization.Json/4.3.0 » System.Private.DataContractSerialization/4.3.0 » System.Xml.XmlSerializer/4.3.0 » System.Text.RegularExpressions/4.3.0 We are using .Net Core 3.1 with the .Net SDK 3.1.411 Kind regards, Dietmar