dotnet / dotnet/wcf

Package 'System.Security.Cryptography.Xml' 10.0.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-37gx-xxp4-5rgx

Open Beginner friendly
#5,960 1 comment 6 reactions 0 assignees View on GitHub
Dominant language
C#
Stars
1.8k
Forks
576
Avg merge
6d 9h
Merged PRs (30d)
2

Description

**Describe the bug**
Please update System.Security.Cryptography.Xml nuget to latest version in System.ServiceModel.Primitives nuget latest version.

**Screenshots**

Image

**Additional context**
dotnet add package System.Security.Cryptography.Xml --version 10.0.9

Contributor guide

Open the contributing guide

Research direction

Start by locating the project or package metadata for System.ServiceModel.Primitives and inspect how it declares System.Security.Cryptography.Xml. Update that dependency to the latest non-vulnerable version requested in the issue, then verify the generated package resolves the updated version and no longer reports the cited advisory.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
backend
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
62/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.