ardalis/ApiEndpoints

Transitive dependency `Microsoft.NETCore.Platforms.3.1.4` contains vulnerabilities according

Open

#191 opened on Feb 9, 2023

View on GitHub
 (1 comment) (0 reactions) (0 assignees)C# (231 forks)github user discovery
dependenciesenhancementgood first issuehelp wanted

Repository metrics

Stars
 (3,200 stars)
PR merge metrics
 (No merged PRs in 30d)

Description

  • NuGet Package Version: Ardalis.ApiEndpoints 4.0.1
  • .NET SDK Version: 7.0.2

Ardalis.ApiEndpoints reference in the .csproj is showing the following warning wish a squiglly line under the package reference:

Transitive dependency Microsoft.NETCore.Platforms.3.1.4 contains vulnerabilities according to Checkmarx(c)

This shows under:

<PackageReference Include="Ardalis.ApiEndpoints" Version="4.0.1" />

This error appears when you have JetBrains ReSharper installed. Check this for more info: https://www.jetbrains.com/help/resharper/VulnerablePackage.html

Steps to Reproduce:

  1. Have ReSharper installed with Visual Studio 2022
  2. Open the .csproj
  3. You will find this: image
  4. When you hover over the error, you will get this warning: Transitive dependency Microsoft.NETCore.Platforms.3.1.4 contains vulnerabilities according to Checkmarx(c).

Contributor guide

Research direction
Upgrade the NuGet package to a version that removes the vulnerable transitive dependency Microsoft.NETCore.Platforms.3.1.4. Check the latest version of Ardalis.ApiEndpoints and its dependency tree.
Tech stack
csharp
Domain
backend
Issue type
Security
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Under 1 hour
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Mostly clear
Prerequisites
NuGet.NET
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
80