Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 15 additions & 11 deletions Directory.Packages.props
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,6 @@
<ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
<CentralPackageTransitivePinningEnabled>true</CentralPackageTransitivePinningEnabled>
</PropertyGroup>

<ItemGroup>
<!-- Common packages -->
<PackageVersion Include="Microsoft.Extensions.Logging" Version="9.0.0" />
Expand All @@ -16,17 +15,22 @@
<PackageVersion Include="System.Net.Http" Version="4.3.0" /> <!-- Contains security vulnerabilities -->

<!-- API dependencies -->
<PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.0" /> <!-- Intentionally older version -->
<PackageVersion Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="7.0.0" /> <!-- Older version -->
<PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.0" />
<!-- Intentionally older version -->
<PackageVersion Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="7.0.0" />
<!-- Older version -->
<PackageVersion Include="Microsoft.AspNetCore.OpenApi" Version="9.0.8" />
<PackageVersion Include="Swashbuckle.AspNetCore" Version="6.2.3" /> <!-- Outdated version -->

<PackageVersion Include="Swashbuckle.AspNetCore" Version="6.2.3" />
<!-- Outdated version -->
<!-- Library dependencies with transitive vulnerabilities -->
<PackageVersion Include="Microsoft.AspNet.WebApi.Client" Version="5.2.7" /> <!-- Has vulnerable dependencies -->
<PackageVersion Include="Microsoft.Data.OData" Version="5.8.4" /> <!-- Contains vulnerable dependency chain -->

<PackageVersion Include="Microsoft.AspNet.WebApi.Client" Version="5.2.7" />
<!-- Has vulnerable dependencies -->
<PackageVersion Include="Microsoft.Data.OData" Version="5.8.4" />
<!-- Contains vulnerable dependency chain -->
<!-- Utility dependencies -->
<PackageVersion Include="log4net" Version="2.0.12" /> <!-- Has known vulnerabilities -->
<PackageVersion Include="SharpZipLib" Version="1.3.1" /> <!-- Contains security issues -->
<PackageVersion Include="log4net" Version="2.0.12" />
<!-- Has known vulnerabilities -->
<PackageVersion Include="SharpZipLib" Version="1.3.1" />
<!-- Contains security issues -->
</ItemGroup>
</Project>
</Project>
Loading