Packages with vulnerabilities

[jvsancho80]

There are 2 vulnerabilities when use de lastest version 3.1.1

[tom-englert]

These are just reference assemblies of netstandard.
They will resolve to the latest versions of the installed framework on your machine at runtime.

So this is only an issue if you are running netcore 3.0 or earlier

[jvsancho80]

I use Net 8

[tom-englert]

So you're safe

[ltrzesniewski]

We could make a new release, that would drop the netstandard1.0 target and upgrade it to netstandard2.0 so nuget would be happy.

[tom-englert]

But it's already 2.0

[ltrzesniewski]

Yeah, in code, but the release dates from 2021 and it's 1.0 there.

[jvsancho80]

The vulnerability is in .Net 8

[tom-englert]

@jvsancho80: 3.1.2 has the latest dependencies

[jvsancho80]

Ok. Thanks.