dansiegel / dansiegel/Mobile.BuildTools
System.Text.JSON 8.0.0 Vulnerability - CVE-2024-43485
- Dominant language
- C#
- Stars
- 224
- Forks
- 28
- PR merge metrics
- No merged PRs in 30d
Description
Our Vulnerability scanner has flagged the "mobile.buildtools.core.2.1.0-pre.463.nupkg" and "mobile.buildtools.appsettings.2.1.0-pre.463.nupkg" for:
- [CVE-2024-43485](https://github.com/advisories/GHSA-8g4q-xg66-9fp4)
- [CVE-2024-30105](https://github.com/advisories/GHSA-hh2w-p6rv-4g7w)

This CVE is due to affected versions of System.Text.Json
.NET 8
| Package name | Affected version | Patched version |
|---------------- | ------------------ | ------------------|
| [System.Text.Json](https://www.nuget.org/packages/System.Text.Json) | >= 8.0.0, <= 8.0.4 | 8.0.5 |
The project targets version 8.0.0.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.