Add top-level reference to System.Security.Cryptography.Pkcs (#6901)

* Update System.Security.Cryptography.Xml to 7.0.1 * Add top-level reference to System.Security.Cryptography.Pkcs
Particular · Oct 26, 2023 · db82ac8 · db82ac8
1 parent 310b8e7
commit db82ac8
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/NServiceBus.Core/NServiceBus.Core.csproj b/src/NServiceBus.Core/NServiceBus.Core.csproj
@@ -20,7 +20,11 @@
   <ItemGroup Label="Public dependencies">
     <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="6.0.0" />
     <PackageReference Include="System.Diagnostics.DiagnosticSource" Version="6.0.0" />
-    <PackageReference Include="System.Security.Cryptography.Xml" Version="6.0.1" />
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="7.0.1" />
+  </ItemGroup>
+
+  <ItemGroup Label="System.Security.Cryptography.Xml 7.0.1 references Pkcs 7.0.0, which has a vulnerability. This should be removed when Xml updates to reference a non-vulernable version">
+    <PackageReference Include="System.Security.Cryptography.Pkcs" Version="7.0.3" />
   </ItemGroup>
 
   <ItemGroup Label="Private dependencies">