Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove Dependency System.Net.Http.Json from Net 6+ #1818

Merged
merged 1 commit into from
Sep 18, 2024
Merged

Conversation

ChrisPulman
Copy link
Member

What kind of change does this PR introduce?

closes #1782

What is the current behavior?

A dependency exists for System.Net.Http.Json, this has a dependency on System.Text.Json which has a vulnerability.

What is the new behavior?

Removing System.Net.Http.Json from Net 6+ will ensure that the current Net6.0.x or Net8.0.x assemblies will be used

What might this PR break?

None

Please check if the PR fulfills these requirements

  • Tests for the changes have been added (for bug fixes / features)
  • Docs have been added / updated (for bug fixes / features)

Other information:

System.Net.Http.Json has a dependency on System.Text.Json which has a vulnerability.
Removing System.Net.Http.Json from Net 6+ will ensure that the current Net6.0.x or Net8.0.x assemblies will be used
@ChrisPulman ChrisPulman merged commit 5d92cf3 into main Sep 18, 2024
1 check passed
@ChrisPulman ChrisPulman deleted the CP_FixFor1782 branch September 18, 2024 20:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Bug]: CVE affecting legacy .NET versions, fix in main branch is unreleased
1 participant