Vulnerability detect

[2024Ezio]

the last available version (4.0.1) has an vulnerability issue. It has a dependency to the package 'AWSSDK.Core' 4.0.3 that
has a known low severity vulnerability as reported at GHSA-9cvc-h2w8-phrp.

Is any planning for a new version that fix this vulnerability?

[dscpinheiro]

I'll convert this to an issue so that we can track the update there (we'll need to bump the versions of the AWSSDK.* packages to get the latest Core).

[normj]

Version 4.0.2 of Amazon.AspNetCore.Identity.Cognito and version 3.1.4 of Amazon.Extensions.CognitoAuthentication have been released updating their references of the SDK packages to the latest version.