Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bugsnag.AspNet.Core has dependencies on deprecated/vulnerable packages #544

Open
ddaspit opened this issue Nov 26, 2024 · 1 comment · May be fixed by #549
Open

Bugsnag.AspNet.Core has dependencies on deprecated/vulnerable packages #544

ddaspit opened this issue Nov 26, 2024 · 1 comment · May be fixed by #549
Assignees
@ddaspit
Labels
security

Comments

@ddaspit
Copy link
Contributor

ddaspit commented Nov 26, 2024

Bugsnag.AspNet.Core hasn't been updated in a couple of years. I don't know if we can expect Bugsnag to fix the issues any time soon. We should consider removing the dependency and providing our own implementation that uses the Bugsnag library directly.
@ddaspit ddaspit added this to Serval Nov 26, 2024
@github-project-automation github-project-automation bot moved this to 🆕 New in Serval Nov 26, 2024
@ddaspit ddaspit moved this from 🆕 New to 🔖 Ready in Serval Nov 26, 2024
@johnml1135
Copy link
Collaborator

This is related to: bugsnag/bugsnag-dotnet#170.

@ddaspit ddaspit moved this from 🔖 Ready to 🏗 In progress in Serval Nov 28, 2024
@ddaspit ddaspit self-assigned this Nov 28, 2024
ddaspit added a commit that referenced this issue Nov 28, 2024
@ddaspit
Update dependencies with vulnerabilities
05489aa 
- update OpenTelemetry
- update MassTransit
- remove Bugsnag.AspNet.Core, implement natively
- fixes #544
@ddaspit ddaspit linked a pull request Nov 28, 2024 that will close this issue
Open
@pmachapman pmachapman mentioned this issue Dec 2, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ddaspit ddaspit

Labels
security
Projects
Serval
Status: 🏗 In progress
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Update dependencies with vulnerabilities sillsdev/serval
2 participants
@ddaspit @johnml1135