Information disclosure vulnerability exists in System.Security.Cryptography.Xml 4.5.0

[ejarvi]

Actual

• Nuget package RiskFirst.Hateoas 3.1.1 uses System.Security.Cryptography.Xml 4.5.0
• Information disclosure vulnerability exists in System.Security.Cryptography.Xml 4.5.0

Expected

• Upgrade Security.Cryptography.Xml from 4.5.0 to 4.7.1 to fix the vulnerability.

References

• https://github.com/dotnet/aspnetcore/security/advisories/GHSA-vh55-786g-wjwj
• https://www.nuget.org/packages/RiskFirst.Hateoas