testfx High severity vulnerabilities in the System.Net.Http@4.3.0 (Dependency on NETStandard.Library@1.6.1)

High severity vulnerabilities in the [email protected] (Dependency on [email protected])

Open Rashmi-nw opened this issue 4 years ago • 4 comments

Description

IMPORTANT: if the defect is reproduced only in a workflow from within the Visual Studio IDE then do not report the issue here - instead, please report it using Visual Studio's "Send Feedback" option that can be accessed from the Help menu OR using this link https://developercommunity.visualstudio.com.

For a defect specific to the MSTest V2 test framework, describe the issue you've observed.

Steps to reproduce

Create a test project using the package - [email protected] or [email protected] Add a sample test and run snyk test

Expected behavior

No high severity vulnerabilities identified. Alternatively upgrade the System.Net.Http Package?

Actual behavior

[email protected] has a dependency on [email protected] which has a dependency on [email protected]. This package has some vulnerabilities The information can be found here : https://snyk.io/vuln/SNYK-DOTNET-SYSTEMNETHTTP-60045