azure-functions-openapi-extension
azure-functions-openapi-extension copied to clipboard
Multiple transitive security vulnerabilities
Describe the issue One project I am working on for a client has recently undergone penetration testing. One result of this pen testing revealed several microservices have security vulnerabilities due to transitive NuGet packages. This is easy to verify using a simple CLI command.
To Reproduce Steps to reproduce the behavior:
- Checkout the source from the repo
- Build the solution
- Execute the following command line from the local directory : dotnet list package --vulnerable --include-transitive --source https://api.nuget.org/v3/index.json
- The dotnet CLI will output a lengthy list of transitive NuGet packages that have security vulnerabilities.
Expected behavior The result of the dotnet CLI command should result in zero security vulnerabilities
Screenshots