search

recurly / recurly-client-dotnet

A .NET API wrapper for Recurly.
https://developers.recurly.com
MIT License
86 stars 80 forks source link

RestSharp.Newtonsoft.Json package has been deprecated and contains vulnerabilities #840

Open gregfergusonvizio opened 5 months ago

gregfergusonvizio commented 5 months ago

Recurly project dependencies contain vulnerabilities.

Describe the bug

Recurly package relies on package RestSharp.Newtonsoft.Json which has been deprecated (no longer maintained). RestSharp.Newtonsoft.Json relies on Newtonsoft.Json 12.0.1 which contains vulnerabilities, in particular, CVE-2024-21907.

Expected behavior

Recurly project dependencies should be updated to rely on projects that are actively maintained.

Your Environment