18acc38c85887f32afcb995b940cc4f2507622be ups the dependency from 6.0.1 (which is not actually in the vulnerable range of 7.0.1..8.0.3, but unfortunately some package stores don't have correct information) to 8.0.4
FsCodec does not lean on the vulnerable method and hence this is not strictly required for any reason
Applications that use FsCodec.SystemTextJson will work correctly if v 8.0.4 of System.Text.Json is supplied in the context of the app.
18acc38c85887f32afcb995b940cc4f2507622be ups the dependency from 6.0.1 (which is not actually in the vulnerable range of 7.0.1..8.0.3, but unfortunately some package stores don't have correct information) to 8.0.4
FsCodec does not lean on the vulnerable method and hence this is not strictly required for any reason
Applications that use FsCodec.SystemTextJson will work correctly if v 8.0.4 of
System.Text.Jsonis supplied in the context of the app.