Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump system.text.json dependency to address CVE-2021-26701 #24

Merged

Conversation

jhoward321
Copy link
Contributor

@jhoward321 jhoward321 commented Nov 5, 2021

Fixes #23

I just bumped system.text.json to version 4.7.2 which shouldn't be a breaking change. All the tests still pass. Would love to get this in so we can use this library.

@CodeBlanch
Copy link
Member

Thanks @jhoward321 I will get this in later tonight or this weekend and push out a new version. Are you OK with it being a beta package? 2.2.0-beta2 probably. I'm going to release a 2.2.0 stable in a few days just wanted to give it a bit of soak time before doing that.

@jhoward321
Copy link
Contributor Author

Beta is definitely fine!

@CodeBlanch CodeBlanch merged commit 603ad2a into Macross-Software:develop Nov 6, 2021
@CodeBlanch
Copy link
Member

Now available in 2.2.0-beta2.

@jhoward321 jhoward321 deleted the ISS23-security-issue branch November 8, 2021 14:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Security Issue in Macross.Json.Extensions
2 participants