microsoftgraph / microsoftgraph/msgraph-sdk-dotnet
Update to non-vulnerable version of Kiota
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 789
- Forks
- 264
- Avg merge
- 15h 17m
- Merged PRs (30d)
- 3
Description
Is your feature request related to a problem? Please describe the problem.
I am trying to install the latest version of the Graph SDK but Visual Studio is telling me there are packages with high severity vulnerabilities. Viz, Microsoft.Kiota.Abstractions
https://github.com/advisories/GHSA-7j59-v9qr-6fq9
Describe the solution you'd like.
Please update the transitive dependency to require version 1.22 or above to resolve this.
Additional context?
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No file or test is named in the issue. Start by locating the project dependency declarations and package graph entry for Microsoft.Kiota.Abstractions, then verify how the transitive version is selected. Done means requiring version 1.22 or above and confirming the reported high-severity advisory is no longer present.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- backend-api-design, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Clearly specified
- Newbie friendliness
- 55/100