You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When building your project in Visual Studio 2022 17.12.3 I noticed the following warnings:
NU1902: Package 'BouncyCastle' 1.8.5 has a known moderate severity vulnerability, GHSA-6xx3-rg99-gc3p
NU1903: Package 'Google.Protobuf' 3.6.1 has a known high severity vulnerability, GHSA-77rm-9x9h-xj3g
NU1903: Package 'Newtonsoft.Json' 12.0.3 has a known high severity vulnerability, GHSA-5crp-9r3c-p9vr
Note 1: if needed, I could create a PR to upgrade these NuGet packages to a version that has these issues resolved.
Note 2: Your project doesn't have a Contributing Guidelines or a Security policy listed, so I hope opening an issue like this is ok.
The text was updated successfully, but these errors were encountered:
Hiho,
Thanks for the hint -- we replaced the mentioned libs with the newest versions. Also, we removed nuget so far from CT2 since it broke our build process. Adding full nuget support is a future task. Also, we will add contribution guidelines.
Kind regards,
Nils
Hi CrypToolProject,
When building your project in Visual Studio 2022 17.12.3 I noticed the following warnings:
NU1902: Package 'BouncyCastle' 1.8.5 has a known moderate severity vulnerability, GHSA-6xx3-rg99-gc3p
NU1903: Package 'Google.Protobuf' 3.6.1 has a known high severity vulnerability, GHSA-77rm-9x9h-xj3g
NU1903: Package 'Newtonsoft.Json' 12.0.3 has a known high severity vulnerability, GHSA-5crp-9r3c-p9vr
Note 1: if needed, I could create a PR to upgrade these NuGet packages to a version that has these issues resolved.
Note 2: Your project doesn't have a Contributing Guidelines or a Security policy listed, so I hope opening an issue like this is ok.
The text was updated successfully, but these errors were encountered: