netmq icon indicating copy to clipboard operation
netmq copied to clipboard

Please fix Security advisory for `Cryptography` 5.0

Open Smurf-IV opened this issue 2 years ago • 3 comments

As seen in the project file:

image

Smurf-IV avatar Jul 20 '23 07:07 Smurf-IV

Yes any update on this? This is being shown constantly now by Visual Studio as it now shows transitive packages. Please update this to a safe version.

james1301 avatar Dec 04 '24 11:12 james1301

+1

KL-Sven avatar Jan 15 '25 09:01 KL-Sven

Net7 or older have already reached end of support and I would not expect any updates. From my findings most packages are bumped to most current available versions, at least I could not see any big improvements with a local upgrade of packages. Either netmq has to stick to Net8 or Net9 only, or you override the outdated packages with vulnerabilities in your application. That said, this package shall not override any transient packages, only the top most app using netmq, which will define the min runtime and can depend on packages with older .net, but not the other way.

https://dotnet.microsoft.com/en-us/platform/support/policy/dotnet-core

tmatthey avatar Jan 21 '25 19:01 tmatthey