Bump dependency (#3956)

microsoft · Oct 21, 2024 · dcef130 · dcef130
1 parent 53c3c4e
commit dcef130
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/Directory.Packages.props b/Directory.Packages.props
@@ -58,6 +58,8 @@
     <PackageVersion Include="Codecov" Version="1.12.3" />
     <PackageVersion Include="FluentAssertions" Version="6.12.0" />
     <PackageVersion Include="FSharp.Core" Version="8.0.200" />
+    <!-- CVE-2024-48924 / Transitive deps of StreamJsonRpc -->
+    <PackageVersion Include="MessagePack" Version="2.5.187" />
     <!-- Pinned to 4.18.4 for security -->
     <PackageVersion Include="Moq" Version="4.18.4" />
     <PackageVersion Include="Microsoft.Extensions.FileSystemGlobbing" Version="8.0.0" />