Skip to content

Conversation

@Nigusu-Allehu
Copy link
Member

@Nigusu-Allehu Nigusu-Allehu commented Oct 16, 2025

Bug

Fixes:

Description

Microsoft.Build 17.12.36 has a vulnerability as per GHSA-w3q9-fxm7-j8fq. This PR updates it to a patched version

PR Checklist

  • Meaningful title, helpful description and a linked NuGet/Home issue
  • Added tests
  • Link to an issue or pull request to update docs if this PR changes settings, environment variables, new feature, etc.

@Nigusu-Allehu Nigusu-Allehu requested a review from a team as a code owner October 16, 2025 23:42
@Nigusu-Allehu Nigusu-Allehu self-assigned this Oct 16, 2025
@Nigusu-Allehu Nigusu-Allehu merged commit 0b6f154 into dev Oct 17, 2025
17 of 18 checks passed
@Nigusu-Allehu Nigusu-Allehu deleted the dev-nyenework-use-patched branch October 17, 2025 19:48
@Nigusu-Allehu
Copy link
Member Author

/backport to release/7.0.x

@github-actions
Copy link

Started backporting to release/7.0.x: https://github.com/NuGet/NuGet.Client/actions/runs/18603397127

@github-actions
Copy link

@Nigusu-Allehu an error occurred while backporting to "release/7.0.x", please check the run log for details!

Error: @Nigusu-Allehu is not a repo collaborator, backporting is not allowed. If you're a collaborator please make sure your NuGet team membership visibility is set to Public on https://github.com/orgs/NuGet/people?query=Nigusu-Allehu

@github-actions
Copy link

Started backporting to release/7.0.x: https://github.com/NuGet/NuGet.Client/actions/runs/18603397127

@github-actions
Copy link

@Nigusu-Allehu an error occurred while backporting to "release/7.0.x", please check the run log for details!

GitHub Actions is not permitted to create or approve pull requests.

@github-actions
Copy link

Started backporting to release/7.0.x: https://github.com/NuGet/NuGet.Client/actions/runs/18603397127

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants