HangfireIO / HangfireIO/Hangfire
Latest version notifies that the package is using unsecure versions of System.Net.Http and Newtonsoft.Json
- Dominant language
- C#
- Stars
- 10.1k
- Forks
- 1.8k
- Avg merge
- 1h 19m
- Merged PRs (30d)
- 1
Description
The latest version (1.7.33) notifies that the package is using unsecure versions of **System.Net.Http** and **Newtonsoft.Json**
See attached images:
Can you please update the dependent packages to a stable or latest versions?
Thanks
Contributor guide
Research direction
Start by locating the dependency declarations for System.Net.Http and Newtonsoft.Json in the repository's package or build configuration. Check the current versions and how the project reports vulnerable dependencies. Done means updating the affected dependencies to stable versions and confirming that the security warnings no longer appear.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- backend, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100