ardalis / ardalis/ApiEndpoints
Transitive dependency `Microsoft.NETCore.Platforms.3.1.4` contains vulnerabilities according
- Dominant language
- C#
- Stars
- 3.2k
- Forks
- 232
- PR merge metrics
- No merged PRs in 30d
Description
- NuGet Package Version: Ardalis.ApiEndpoints 4.0.1
- .NET SDK Version: 7.0.2
Ardalis.ApiEndpoints reference in the .csproj is showing the following warning wish a squiglly line under the package reference:
Transitive dependency `Microsoft.NETCore.Platforms.3.1.4` contains vulnerabilities according to Checkmarx(c)
This shows under:
```
```
This error appears when you have JetBrains ReSharper installed. Check this for more info: https://www.jetbrains.com/help/resharper/VulnerablePackage.html
Steps to Reproduce:
1. Have ReSharper installed with Visual Studio 2022
2. Open the .csproj
3. You will find this:

4. When you hover over the error, you will get this warning: Transitive dependency `Microsoft.NETCore.Platforms.3.1.4` contains vulnerabilities according to Checkmarx(c).
Contributor guide
Research direction
Start with the .csproj PackageReference for Ardalis.ApiEndpoints 4.0.1 and reproduce the warning in Visual Studio 2022 with ReSharper installed, using the stated .NET SDK version. Trace whether Microsoft.NETCore.Platforms.3.1.4 is introduced transitively and determine whether the warning can be resolved through a supported package update. Done means the warning is removed or the dependency limitation is clearly documented.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- backend, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100