Skip to content

Denial of Service Vulnerability in System.Text.Json < 8.0.4#4

Closed
axunonb wants to merge 1 commit intomainfrom
pr/system-text-json-vulnerable
Closed

Denial of Service Vulnerability in System.Text.Json < 8.0.4#4
axunonb wants to merge 1 commit intomainfrom
pr/system-text-json-vulnerable

Conversation

@axunonb
Copy link
Copy Markdown
Owner

@axunonb axunonb commented Jul 25, 2024

  • Bump System.Text.Json to v8.0.4
  • A vulnerability exists in .NET when calling the JsonSerializer.DeserializeAsyncEnumerable method against an untrusted input using System.Text.Json may result in Denial of Service.
  • See details: GHSA-hh2w-p6rv-4g7w

PR Classification

Dependency updates to ensure compatibility and stability.

PR Summary

Updated package versions to maintain compatibility and stability.

  • SmartFormat.Extensions.System.Text.Json.csproj: Updated System.Text.Json from 8.0.3 to 8.0.4.
  • SmartFormat.Tests.csproj: Updated Microsoft.NET.Test.Sdk from 17.9.0 to 17.10.0 and NUnit3TestAdapter from 4.5.0 to 4.6.0.

* Bump System.Text.Json to v8.0.4
* A vulnerability exists in .NET when calling the JsonSerializer.DeserializeAsyncEnumerable method against an untrusted input using System.Text.Json may result in Denial of Service.
* See details: GHSA-hh2w-p6rv-4g7w
@axunonb axunonb closed this Jul 25, 2024
@axunonb axunonb deleted the pr/system-text-json-vulnerable branch July 25, 2024 21:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant