Package 'System.Security.Cryptography.Xml' 10.0.0 has a known high severity vulnerability, https://github.com/advisories/GHSA-37gx-xxp4-5rgx
Open
Beginner friendly
- Dominant language
- C#
- Stars
- 1.8k
- Forks
- 576
- Avg merge
- 6d 9h
- Merged PRs (30d)
- 2
Description
**Describe the bug**
Please update System.Security.Cryptography.Xml nuget to latest version in System.ServiceModel.Primitives nuget latest version.
**Screenshots**
**Additional context**
dotnet add package System.Security.Cryptography.Xml --version 10.0.9
Contributor guide
Research direction
Start by locating the project or package metadata for System.ServiceModel.Primitives and inspect how it declares System.Security.Cryptography.Xml. Update that dependency to the latest non-vulnerable version requested in the issue, then verify the generated package resolves the updated version and no longer reports the cited advisory.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- backend
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 62/100