Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update EntityFramework to version 8.0.11 to fix CVE-2024-43483 #206

Merged
merged 2 commits into from
Nov 18, 2024

Conversation

michaelmairegger
Copy link
Contributor

No description provided.

@StefH
Copy link
Collaborator

StefH commented Nov 18, 2024

@michaelmairegger
Is there also a fix needed for other EF Versions, like 5,6,7?

@StefH StefH added the bug label Nov 18, 2024
@michaelmairegger
Copy link
Contributor Author

michaelmairegger commented Nov 18, 2024

net5 & net7 does not report any issues. But I do not know whether Microsoft.Extensions.Caching.Memory in v5 and v7 has no issues or has no reported issues since net 5 & 7 are unsupported.

I have updated Microsoft.EntityFrameworkCore to the newest version which has no reported issues with dotnet list package --vulnerable --include-transitive.

Note: net8 & net9 are, as of today, the only supported versions

@StefH StefH merged commit 67c1993 into scottksmith95:master Nov 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants