kubemq-CSharp icon indicating copy to clipboard operation
kubemq-CSharp copied to clipboard

Insecure Extensive use of BinaryFormatter

Open Jab0rnal opened this issue 3 years ago • 1 comments

When attempting to implement this library, I have been getting the following error message:

Exception thrown: 'System.NotSupportedException' in System.Runtime.Serialization.Formatters.dll
BinaryFormatter serialization and deserialization are disabled within this application.

The implementation here is using an unsecure method of binary serialization for serializing event bodies, as described here:

https://docs.microsoft.com/en-gb/dotnet/standard/serialization/binaryformatter-security-guide

A list of "preferred alternatives" are described in the document.

Jab0rnal avatar Jun 29 '22 16:06 Jab0rnal

Please check with the latest version v1.6.0

kubemq avatar Dec 20 '22 14:12 kubemq