Getting Vulnerabilities for System.Formats.Asn1, System.IO.Compression.ZipFile, System.Net.Http

[vivekjadhav8390]

Hi,
We are getting vulnerabilities in our project for below listed packages those are referred in antlr4 nuget package.

System.Formats.Asn1
System.IO.Compression.ZipFile
System.Net.Http

We are using ANTLR4 4.6.6. Will there be a new nuget version to solve these vulnerabilities ?

[lextm]

You can add the latest of those packages to your main project, which should override the old versions during compilation.

This is a very common case these days and VS NuGet Package Manager has been improved to help you locate such obsolete/vulnerable transient packages and resolve such issues.