[GHSA-p9wx-v264-q34p] Improper Certificate Validation in Microsoft .NET Framework components

[florelis]

Updates

• Affected products

[florelis]

This advisory refers to 6 NuGet packages under System.ServiceModel.
According to the original announcement (dotnet/announcements#73), for four of these packages, one of the affected version ranges is [4.0.0, 4.1.3) with fixed version = 4.1.3, while for the last two it is [4.0.0, 4.0.2] with fixed version = 4.0.4. The advisory here uses [4.0.0, 4.1.3) for all six packages, which I imagine was a data entry error from thinking they all had the same version ranges.

[advisory-database]

Hi @lechacon! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!