Eric Jarvi

Results 3 issues of Eric Jarvi

Adds a note to help anyone who is trying these steps from an existing installation of Visual Studio that doesn't yet include support for Azure development workloads, since it would...

**Actual** - Nuget package RiskFirst.Hateoas 3.1.1 uses System.Security.Cryptography.Xml 4.5.0 - Information disclosure vulnerability exists in System.Security.Cryptography.Xml 4.5.0 **Expected** - Upgrade Security.Cryptography.Xml from 4.5.0 to 4.7.1 to fix the vulnerability. **References**...

**Actual** - Nuget package RiskFirst.Hateoas 3.1.1 uses Newtonsoft.Json 12.0.1 - "Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability" (CVE-2024-21907) **Expected** - Upgrade Newtonsoft.Json from 12.0.1...