Azure / Azure/azure-notificationhubs-dotnet
Update Microsoft.Extensions.Caching.Memory dependency to 6.0.2 to address CVE-2024-43483
- Dominant language
- C#
- Stars
- 75
- Forks
- 135
- PR merge metrics
- No merged PRs in 30d
Description
`Microsoft.Azure.NotificationHubs` currently [has a dependency](https://github.com/Azure/azure-notificationhubs-dotnet/blob/87fca6b3d66ed2855dd6d304811a8045eb31c8f6/src/Microsoft.Azure.NotificationHubs/Microsoft.Azure.NotificationHubs.csproj#L43) on `Microsoft.Extensions.Caching.Memory` 6.0.1, which has vulnerability [CVE-2024-43483](https://github.com/advisories/GHSA-qj66-m88j-hmgj). Can this be updated to 6.0.2 to address this?
Contributor guide
No contributing guide indexed for this repository
Research direction
Open src/Microsoft.Azure.NotificationHubs/Microsoft.Azure.NotificationHubs.csproj at the referenced dependency entry and review the Microsoft.Extensions.Caching.Memory version. Update the dependency to the requested secure version, then restore or audit the project to confirm the CVE is no longer reported.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- security
- Issue type
- Bug
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 35/100