NLog.Targets.ElasticSearch icon indicating copy to clipboard operation
NLog.Targets.ElasticSearch copied to clipboard

[Vulnerability] Improper Handling of Exceptional Conditions in Newtonsoft.Json

Open sixnaskunz opened this issue 2 years ago • 8 comments

Please fix this vulnerability. https://github.com/advisories/GHSA-5crp-9r3c-p9vr

sixnaskunz avatar Dec 15 '23 17:12 sixnaskunz

master-branch has been updated. Just awaiting a release-build and publish to nuget.

@markmcdowell Anything missing for publishing a new release to nuget?

snakefoot avatar Dec 15 '23 17:12 snakefoot

master-branch has been updated. Just awaiting a release-build and publish to nuget.

@markmcdowell Anything missing for publishing a new release to nuget?

@snakefoot Thanks.

For now, Newtonsoft.Json already release version 13.0.3. https://www.nuget.org/packages/Newtonsoft.Json/

sixnaskunz avatar Dec 15 '23 18:12 sixnaskunz

@markmcdowell I found version 7.8.0 already tagged in GitHub Repo but not publish to NuGet. Please publish to NuGet. Thank you.

https://github.com/markmcdowell/NLog.Targets.ElasticSearch/releases/tag/v7.8.0

sixnaskunz avatar Dec 18 '23 02:12 sixnaskunz

@snakefoot Do you know who can publish package to NuGet?

sixnaskunz avatar Dec 22 '23 09:12 sixnaskunz

Believe the repo-owner @markmcdowell controls the nuget-key

snakefoot avatar Dec 22 '23 10:12 snakefoot

Believe the repo-owner @markmcdowell controls the nuget-key

Ok. Thank you. I hope the new version is coming soon.

sixnaskunz avatar Dec 22 '23 13:12 sixnaskunz

Notice that ElasticSearch have now released their own official NLog Target for ElasticSearch:

  • https://www.nuget.org/packages/Elastic.NLog.Targets/#readme-body-tab
  • https://github.com/elastic/ecs-dotnet/tree/main/src/Elastic.NLog.Targets

snakefoot avatar Jun 19 '24 19:06 snakefoot

Notice that ElasticSearch have now released their own official NLog Target for ElasticSearch:

  • https://www.nuget.org/packages/Elastic.NLog.Targets/#readme-body-tab
  • https://github.com/elastic/ecs-dotnet/tree/main/src/Elastic.NLog.Targets

Oh! Thank you for your information. This is good news.

sixnaskunz avatar Jun 20 '24 14:06 sixnaskunz