port: Update Microsoft.AspNetCore.Http to 2.1.22 (#5936)

Open github-actions[bot] opened this issue 4 years ago • 0 comments

The changes in Update Microsoft.AspNetCore.Http to 2.1.22 (#5936) may need to be ported to maintain parity with microsoft/botbuilder-dotnet.

Fixes #5930
Description

Microsoft.AspNetCore.Http version 2.1.0 has a security vulnerability explained here: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1045.

This change is to update all projects depending on this package to version 2.1.22, which is a safe version.

Please review and, if necessary, port the changes.

Oct 29 '21 00:10 github-actions[bot]