braintree_dotnet icon indicating copy to clipboard operation
braintree_dotnet copied to clipboard

Published 20 hours ago • verified publisher icon braintree

Bump System.Xml.XPath.XmlDocument dependency (NetStandard 2.0)

Open Tankzor opened this issue 8 months ago • 0 comments

Seems to be referencing 4.3.0, but there's a newer version 4.7.0.

I only ask because the reference chain from 4.3.0 includes -> System.Xml.ReaderWriter (4.3.0) -> System.Text.RegularExpressions (4.3.0) which is one of the only transitive packages we have with a 'high' security vulnerability ( https://github.com/advisories/GHSA-cmhx-cq75-c4mj ).

Tankzor avatar Mar 04 '25 08:03 Tankzor