CVE-2024-35255 being picked up in security scan

microsoft / artifacts-credprovider

The Azure Artifacts Credential Provider enables dotnet, NuGet.exe, and MSBuild to interactively acquire credentials for Azure Artifacts feeds.

MIT License

782 stars 705 forks source link

CVE-2024-35255 being picked up in security scan #511

Closed jftl6y closed 1 month ago

jftl6y commented 2 months ago

CVE-2024-35255 is being flagged by Defender for Containers for an outdated version of the Microsoft.Identity.Client library (referenced in Microsoft.Artifacts.Authentication). Need to update the referenced version of Microsoft.Identity.Client.

NoDataAvailable commented 1 month ago

Fixed in #513