search

ardalis / ApiEndpoints

A project for supporting API Endpoints in ASP.NET Core web applications.
MIT License
3.13k stars 227 forks source link

Transitive dependency `Microsoft.NETCore.Platforms.3.1.4` contains vulnerabilities according #191

Open ProbitasAdamTibi opened 1 year ago

ProbitasAdamTibi commented 1 year ago

Ardalis.ApiEndpoints reference in the .csproj is showing the following warning wish a squiglly line under the package reference:

Transitive dependency Microsoft.NETCore.Platforms.3.1.4 contains vulnerabilities according to Checkmarx(c)

This shows under:

<PackageReference Include="Ardalis.ApiEndpoints" Version="4.0.1" />

This error appears when you have JetBrains ReSharper installed. Check this for more info: https://www.jetbrains.com/help/resharper/VulnerablePackage.html

Steps to Reproduce:

  1. Have ReSharper installed with Visual Studio 2022
  2. Open the .csproj
  3. You will find this: image
  4. When you hover over the error, you will get this warning: Transitive dependency Microsoft.NETCore.Platforms.3.1.4 contains vulnerabilities according to Checkmarx(c).