-
Notifications
You must be signed in to change notification settings - Fork 280
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
CVE | Version bump Microsoft.IdentityModel.JsonWebTokens to 6.35.0 #2290
CVE | Version bump Microsoft.IdentityModel.JsonWebTokens to 6.35.0 #2290
Conversation
Hope you plan to backport to 5.1.x 🙏 |
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #2290 +/- ##
==========================================
+ Coverage 72.50% 72.58% +0.08%
==========================================
Files 310 310
Lines 62065 62065
==========================================
+ Hits 45002 45052 +50
+ Misses 17063 17013 -50
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
Will add it to the next hotfix list. |
There is new version 6.35 of Microsoft.IdentityModel.JsonWebTokens, released yesterday. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good
This commit backports PR#2290 changes to 5.1.5
Microsoft Security Advisory CVE-2024-21319: .NET Denial of Service Vulnerability
Extra link: CVE-2024-21319