search

auth0 / auth0-oidc-client-net

OIDC Client for .NET Desktop and Mobile applications
https://auth0.github.io/auth0-oidc-client-net/
Apache License 2.0
84 stars 48 forks source link

Bump test dependencies to fix vulnerability #300

Closed frederikprijck closed 9 months ago

frederikprijck commented 9 months ago

Changes

Bumps Microsoft.NET.Test.Sdk

References

✗ Insecure Defaults [High Severity][https://security.snyk.io/vuln/SNYK-DOTNET-NEWTONSOFTJSON-2774678] in Newtonsoft.Json@9.0.1
    introduced by Microsoft.NET.Test.Sdk@16.11.0 > Microsoft.TestPlatform.TestHost@16.11.0 > Newtonsoft.Json@9.0.1
  This issue was fixed in versions: 13.0.1
  ✗ Regular Expression Denial of Service (ReDoS) [High Severity][https://security.snyk.io/vuln/SNYK-DOTNET-SYSTEMTEXTREGULAREXPRESSIONS-[174](https://github.com/auth0/auth0-oidc-client-net/actions/runs/6798140636/job/18482169715#step:10:175)708] in System.Text.RegularExpressions@4.3.0
    introduced by Microsoft.NET.Test.Sdk@16.11.0 > Microsoft.TestPlatform.TestHost@16.11.0 > Newtonsoft.Json@9.0.1 > System.Text.RegularExpressions@4.3.0 and 14 other path(s)
  This issue was fixed in versions: 4.3.1

Checklist