Merged PR 88097: Address vulnerability in transitive dependency packa…

…ge System.Text.Encodings.Web Address vulnerability in transitive dependency package System.Text.Encodings.Web
MiXTelematics · Jul 30, 2023 · 7e92e69 · 7e92e69
2 parents 3ce3e81 + 1597a97
commit 7e92e69
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 10 deletions.
diff --git a/.nuget/nuget.config b/.nuget/nuget.config
@@ -1,13 +1,6 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <configuration>
-  <config>
-    <!-- <add key="repositoryPath" value="..\External Components\NuGet Packages" /> -->
-    <!-- <add key="globalPackagesFolder" value="External Components\NuGet Packages" /> -->
-  </config>
   <packageSources>
-    <add key="nuget.org 1" value="https://nuget.org/api/v2/" />
+    <add key="nuget.org" value="https://api.nuget.org/v3/index.json" />
   </packageSources>
-  <solution>
-    <add key="disableSourceControlIntegration" value="true" />
-  </solution>
 </configuration>
diff --git a/MiX.Identity.Client/MiX.Identity.Client.csproj b/MiX.Identity.Client/MiX.Identity.Client.csproj
@@ -17,6 +17,7 @@
 
   <ItemGroup>
 	  <PackageReference Include="System.Text.Json" Version="4.6.0" />
+	  <PackageReference Include="System.Text.Encodings.Web" Version="4.7.2" />
   </ItemGroup>
 
 </Project>
diff --git a/MiX.Identity.Client/MiX.Identity.Client.nuspec b/MiX.Identity.Client/MiX.Identity.Client.nuspec
@@ -14,8 +14,9 @@
     <tags>MiX Identity Client</tags>
     <dependencies>
 			<group targetFramework=".NETStandard2.0">
-				<dependency id="NETStandard.Library" version="2.0.0"  />
+				<dependency id="NETStandard.Library" version="2.0.3"  />
 				<dependency id="System.Text.Json" version="4.6.0"  />
+				<dependency id="System.Text.Encodings.Web" version="4.7.2"  />
 			</group>
     </dependencies>
   </metadata>