v3.2.4.0 Bugfix Release

Fixed in this Release:

#179 Checking Cached vs Uncached packages can cause an index out of range exception when more than 128 packages are being scanned and GHSA or OSSIndex is enabled.

v4.0.3.0 BugFix Release

Issues fixed this release:

• Fixed Package Reference Parsing not correctly parsing the PackageID's
• Fix CLI options
  • --check-referenced-projects also set --check-transitive-dependencies
  • --tfm was not being used at all

Other Changes

Bumped Dependencies

v3.2.3.0 BugFix Release

Issues fixed this release:

• Fixed Package Reference Parsing not correctly parsing the PackageID's
• Fix CLI options
  • --check-referenced-projects also set --check-transitive-dependencies
  • --tfm was not being used at all

Other Changes

Bumped Dependencies

v4.0.2.0

Fixed this release:

• #176 Index Out of Range Error
• NVD-Recreate (NuGetDefense.Tool) errors if --vuln-data-bin includes a directory that does not exist in it's path

v3.2.2.0

Fixed this release:

• #176 Index Out of Range Error
• NVD-Recreate (NuGetDefense.Tool) errors if --vuln-data-bin includes a directory that does not exist in it's path

V4.0.1

Fixed this Release

#153 NuGetDefence.lib: scanning twice does not report the vulnerabilities on secound scan

v3.2.1.0

Backporting Fixes from the v4.x branch for v3.x (.Net 6.0)

#153 NuGetDefence.lib: scanning twice does not report the vulnerabilities on secound scan

v4.0.0.1 Hotfix

Path to NuGetDefense in the msbuild file was referencing .Net 6.0:

Fixed #172

v4.0.0.0 .Net 8.0

No issues were reported specific to the prerelease. This release only bumps the required sdk/runtime to .Net 8 (the current LTS released a few months ago). If you want to keep using 3.x, it will remain supported and features/fixes will be backported for the remainder of .Net 6.0's support lifecycle.

v4.0.0.0-prerelease1

First .Net 8 release

Bumping the framework version. Assuming no issues are found this should be fully released within a week