From adef12f8d6101cc3774130eff8ce86ebeefd4952 Mon Sep 17 00:00:00 2001 From: Paul Astbury-Thomas Date: Mon, 13 Nov 2023 17:40:19 +0000 Subject: [PATCH] Replacing deprecated Confluent packages in Squidex.Extensions (#1039) - Confluent.Apache.Avro has a dependency on log4net 2.0.8 that has been flagged as having a critical vulnerability (CVE-2018-1285) - This also means Confluent.Kafka (now a transitive dependency) has been implicitly upgraded to 2.3.0 --- .../extensions/Squidex.Extensions/Squidex.Extensions.csproj | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/backend/extensions/Squidex.Extensions/Squidex.Extensions.csproj b/backend/extensions/Squidex.Extensions/Squidex.Extensions.csproj index 202974e454..63646d3a9a 100644 --- a/backend/extensions/Squidex.Extensions/Squidex.Extensions.csproj +++ b/backend/extensions/Squidex.Extensions/Squidex.Extensions.csproj @@ -13,11 +13,9 @@ - - - + - +