Skip to content

Conversation

SimonCropp
Copy link
Contributor

@SimonCropp SimonCropp commented Apr 10, 2024

This PR is to show how Octostache will fail a CVE audit because it has a transitive reference to vunerable versions of System.Text.RegularExpressions and System.Net.Http

Can you please update to versions with no CVE so as to not force that change on all consumers

C:\Code\Octostache\source\Octostache\Octostache.csproj : error NU1903: Warning As Error: Package 'System.Text.RegularEx
pressions' 4.3.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-cmhx-cq75-c4mj [C:\Code\Oc
tostache\source\Octostache.sln]
  Failed to restore C:\Code\Octostache\source\Octostache\Octostache.csproj (in 22 sec).
C:\Code\Octostache\source\Octostache.Tests\Octostache.Tests.csproj : error NU1903: Warning As Error: Package 'System.Ne
t.Http' 4.3.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-7jgj-8wvc-jh57 [C:\Code\Octos
tache\source\Octostache.sln]
C:\Code\Octostache\source\Octostache.Tests\Octostache.Tests.csproj : error NU1903: Warning As Error: Package 'System.Te
xt.RegularExpressions' 4.3.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-cmhx-cq75-c4mj
 [C:\Code\Octostache\source\Octostache.sln]

@JessThrysoee
Copy link

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants