ardalis / ardalis/ApiEndpoints

Transitive dependency `Microsoft.NETCore.Platforms.3.1.4` contains vulnerabilities according

Open
#191 1 comment 0 reactions 0 assignees View on GitHub
dependencies enhancement good first issue help wanted
Dominant language
C#
Stars
3.2k
Forks
232
PR merge metrics
No merged PRs in 30d

Description

- NuGet Package Version: Ardalis.ApiEndpoints 4.0.1
- .NET SDK Version: 7.0.2

Ardalis.ApiEndpoints reference in the .csproj is showing the following warning wish a squiglly line under the package reference:

Transitive dependency `Microsoft.NETCore.Platforms.3.1.4` contains vulnerabilities according to Checkmarx(c)

This shows under:
```

```

This error appears when you have JetBrains ReSharper installed. Check this for more info: https://www.jetbrains.com/help/resharper/VulnerablePackage.html

Steps to Reproduce:

1. Have ReSharper installed with Visual Studio 2022
2. Open the .csproj
3. You will find this:
![image](https://user-images.githubusercontent.com/117346300/217780738-2029d7a0-b6f4-45cf-9d6e-087d28728f8b.png)
4. When you hover over the error, you will get this warning: Transitive dependency `Microsoft.NETCore.Platforms.3.1.4` contains vulnerabilities according to Checkmarx(c).

Contributor guide

Open the contributing guide

Research direction

Start with the .csproj PackageReference for Ardalis.ApiEndpoints 4.0.1 and reproduce the warning in Visual Studio 2022 with ReSharper installed, using the stated .NET SDK version. Trace whether Microsoft.NETCore.Platforms.3.1.4 is introduced transitively and determine whether the warning can be resolved through a supported package update. Done means the warning is removed or the dependency limitation is clearly documented.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
backend, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.