dansiegel / dansiegel/Mobile.BuildTools

System.Text.JSON 8.0.0 Vulnerability - CVE-2024-43485

Open
#359 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C#
Stars
224
Forks
28
PR merge metrics
No merged PRs in 30d

Description

Our Vulnerability scanner has flagged the "mobile.buildtools.core.2.1.0-pre.463.nupkg" and "mobile.buildtools.appsettings.2.1.0-pre.463.nupkg" for:

- [CVE-2024-43485](https://github.com/advisories/GHSA-8g4q-xg66-9fp4)
- [CVE-2024-30105](https://github.com/advisories/GHSA-hh2w-p6rv-4g7w)

![Image](https://github.com/user-attachments/assets/121cc57b-e32d-4826-a04d-87ec51a04567)

This CVE is due to affected versions of System.Text.Json
.NET 8
| Package name | Affected version | Patched version |
|---------------- | ------------------ | ------------------|
| [System.Text.Json](https://www.nuget.org/packages/System.Text.Json) | >= 8.0.0, <= 8.0.4 | 8.0.5 |

The project targets version 8.0.0.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.