Closed chaparo closed 1 month ago
Thank you for your feedback. Tagging and routing to the team member best able to assist.
@chaparo: CVE 2024-30105 was updated to amend the STJ versions flagged as vulnerable to include only 7.0.0 - 8.0.3. The Azure SDK packages, including Core, are using v4.7.2, which is not marked vulnerable.
Hi @chaparo. Thank you for opening this issue and giving us the opportunity to assist. We believe that this has been addressed. If you feel that further discussion is needed, please add a comment with the text "/unresolve" to remove the "issue-addressed" label and continue the conversation.
Hi @chaparo, since you haven’t asked that we /unresolve
the issue, we’ll close this out. If you believe further discussion is needed, please add a comment /unresolve
to reopen the issue.
https://github.com/Azure/azure-sdk-for-net/blob/442f867b186146a0fa292888d8a7b80a9dfd9db0/sdk/core/Azure.Core/src/Azure.Core.csproj#L28