FSharp.SystemTextJson icon indicating copy to clipboard operation
FSharp.SystemTextJson copied to clipboard

Package 'System.Text.Json' 6.0.0 has a known high severity vulnerability

Open jasonzoladz opened this issue 1 year ago • 1 comments

When building a project that includes a classlib using FSharp.SystemTextJson one encounters the warning:

Package 'System.Text.Json' 6.0.0 has a known high severity vulnerability

That vulnerability is discussed here.

I realize that the vulnerability only concerns JSON models that utilize [JsonExtensionData] and that this repo's code does not use it. However, the warning appears for users and can be removed by updating the dependency to the patched version.

jasonzoladz avatar Dec 10 '24 18:12 jasonzoladz

Same issue here

games avatar Dec 19 '24 04:12 games

This is fixed in v1.4: the minimum dependency is now 6.0.10.

Tarmil avatar Jun 14 '25 10:06 Tarmil