Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix CVEs #155

Merged
merged 3 commits into from
Apr 7, 2024
Merged

fix CVEs #155

merged 3 commits into from
Apr 7, 2024

Conversation

SimonCropp
Copy link
Contributor 

 C:\Code\alba\src> dotnet restore
    C:\Code\alba\src\IdentityServer.New\IdentityServer.New.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 6.10.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\IdentityServer.New\IdentityServer.New.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 6.10.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\IdentityServer.New\IdentityServer.New.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 6.10.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\IdentityServer.New\IdentityServer.New.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 6.10.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\NUnitSamples\NUnitSamples.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 6.10.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\NUnitSamples\NUnitSamples.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 6.10.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\NUnitSamples\NUnitSamples.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 6.15.1 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\NUnitSamples\NUnitSamples.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 6.15.1 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\NUnitSamples\NUnitSamples.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 6.10.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\NUnitSamples\NUnitSamples.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 6.10.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\NUnitSamples\NUnitSamples.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 6.15.1 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\NUnitSamples\NUnitSamples.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 6.15.1 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\WebAppSecuredWithJwt\WebAppSecuredWithJwt.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 6.25.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\WebAppSecuredWithJwt\WebAppSecuredWithJwt.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 6.25.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\WebAppSecuredWithJwt\WebAppSecuredWithJwt.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 6.25.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\WebAppSecuredWithJwt\WebAppSecuredWithJwt.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 6.25.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba\Alba.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 6.10.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba\Alba.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 6.10.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba\Alba.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 6.15.1 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba\Alba.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 6.15.1 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba\Alba.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 7.0.3 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba\Alba.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 7.0.3 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba\Alba.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 6.10.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba\Alba.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 6.10.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba\Alba.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 6.15.1 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba\Alba.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 6.15.1 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba\Alba.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 7.0.3 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba\Alba.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 7.0.3 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba.Testing\Alba.Testing.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 6.25.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba.Testing\Alba.Testing.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 6.25.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba.Testing\Alba.Testing.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 7.0.3 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba.Testing\Alba.Testing.csproj : error NU1902: Warning As Error: Package 'Microsoft.IdentityModel.JsonWebTokens' 7.0.3 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba.Testing\Alba.Testing.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 6.25.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba.Testing\Alba.Testing.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 6.25.0 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba.Testing\Alba.Testing.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 7.0.3 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-59j7-ghrg-fj52 [C:\Code\alba\src\Alba.sln]
    C:\Code\alba\src\Alba.Testing\Alba.Testing.csproj : error NU1902: Warning As Error: Package 'System.IdentityModel.Tokens.Jwt' 7.0.3 has a known moderate severity vulnerability, https://github.com/advisories/GHSA-8g9c-28fc-mcx2 [C:\Code\alba\src\Alba.sln]

@Hawxy Hawxy merged commit b16953d into JasperFx:master Apr 7, 2024
1 check passed
@SimonCropp SimonCropp deleted the cve branch April 7, 2024 11:00
@SimonCropp
Copy link
Contributor Author

can we get a release of this. to avoid transitive CVEs in consuming projects

@Hawxy
Copy link
Collaborator

Hawxy commented Apr 7, 2024

can we get a release of this.

There's still a few issues queued up for v8 I'd like to see done first, I'll look at getting a release out later in the week.

I exclude test projects from scanning tools to avoid this issue though.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@Hawxy Hawxy Hawxy approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@SimonCropp @Hawxy