Package 'System.Net.Http' 4.3.0 has a known high severity vulnerability on Abp.Dapper

aspnetboilerplate / aspnetboilerplate

ASP.NET Boilerplate - Web Application Framework

https://aspnetboilerplate.com

MIT License

11.83k stars 3.79k forks source link

Package 'System.Net.Http' 4.3.0 has a known high severity vulnerability on Abp.Dapper #7064

Open rjs123431 opened 6 days ago

rjs123431 commented 6 days ago

Abp version 10.0.0
.Net 9.0

Abp.Dapper is using DapperExtensions.DotnetCore 1.0.1 which is dependent to NETStandard.Library 1.6.1 and System.Net.Http 4.3.0 which has a known high severity vulnerability.

ismcagdas commented 6 days ago

@rjs123431 thank you, we will try to replace or remove it.