]> git.deb.at Git - rhonda/impostor.git/commit
Bump System.Text.Json to 8.0.4
authorminiduikboot <mini@duikbo.at>
Sun, 28 Jul 2024 20:30:55 +0000 (22:30 +0200)
committerminiduikboot <mini@duikbo.at>
Mon, 29 Jul 2024 17:59:24 +0000 (19:59 +0200)
commit2d82e1af198d51d76566cb779be1d7456d7358d9
treec32c0da912b172d2ad026c970660302137f3c76c
parentc6bad153466142617b886a9a5a5c22650e9fecaf
Bump System.Text.Json to 8.0.4

Fixes CVE-2024-30105 (High 7.5/10)
https://github.com/advisories/GHSA-hh2w-p6rv-4g7w

Impostor doesn't use the affected
JsonSerializer.DeserializeAsyncEnumerable method as it doesn't accept
JSON formatted payloads, but the NU1903 warning is shown on all builds,
leading to warning fatigue.
src/Impostor.Api.Innersloth.Generator/Impostor.Api.Innersloth.Generator.csproj
src/Impostor.Api.Innersloth.Generator/packages.lock.json