|
12 | 12 | </ItemGroup> |
13 | 13 | <!-- Microsoft packages --> |
14 | 14 | <ItemGroup> |
15 | | - <PackageVersion Include="Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation" Version="9.0.0" /> |
16 | | - <PackageVersion Include="Microsoft.CodeAnalysis.CSharp" Version="4.10.0" /> |
17 | | - <PackageVersion Include="Microsoft.Data.Sqlite" Version="9.0.0" /> |
18 | | - <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite" Version="9.0.0" /> |
19 | | - <PackageVersion Include="Microsoft.EntityFrameworkCore.SqlServer" Version="9.0.0" /> |
20 | | - <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.10" /> |
21 | | - <PackageVersion Include="Microsoft.Extensions.Caching.Abstractions" Version="9.0.0" /> |
22 | | - <PackageVersion Include="Microsoft.Extensions.Caching.Memory" Version="9.0.0" /> |
23 | | - <PackageVersion Include="Microsoft.Extensions.Configuration.Abstractions" Version="9.0.0" /> |
24 | | - <PackageVersion Include="Microsoft.Extensions.Configuration.Json" Version="9.0.0" /> |
25 | | - <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="9.0.0" /> |
26 | | - <PackageVersion Include="Microsoft.Extensions.FileProviders.Embedded" Version="9.0.0" /> |
27 | | - <PackageVersion Include="Microsoft.Extensions.FileProviders.Physical" Version="9.0.0" /> |
28 | | - <PackageVersion Include="Microsoft.Extensions.Hosting.Abstractions" Version="9.0.0" /> |
29 | | - <PackageVersion Include="Microsoft.Extensions.Http" Version="9.0.0" /> |
30 | | - <PackageVersion Include="Microsoft.Extensions.Identity.Core" Version="9.0.0" /> |
31 | | - <PackageVersion Include="Microsoft.Extensions.Identity.Stores" Version="9.0.0" /> |
32 | | - <PackageVersion Include="Microsoft.Extensions.Logging" Version="9.0.0" /> |
33 | | - <PackageVersion Include="Microsoft.Extensions.Options" Version="9.0.0" /> |
34 | | - <PackageVersion Include="Microsoft.Extensions.Options.ConfigurationExtensions" Version="9.0.0" /> |
35 | | - <PackageVersion Include="Microsoft.Extensions.Options.DataAnnotations" Version="9.0.0" /> |
36 | | - <PackageVersion Include="Microsoft.Extensions.Caching.Hybrid" Version="9.0.0-preview.9.24556.5" /> |
| 15 | + <PackageVersion Include="Microsoft.AspNetCore.Mvc.Razor.RuntimeCompilation" Version="9.0.6" /> |
| 16 | + <PackageVersion Include="Microsoft.CodeAnalysis.CSharp" Version="4.14.0" /> |
| 17 | + <PackageVersion Include="Microsoft.Data.Sqlite" Version="9.0.6" /> |
| 18 | + <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite" Version="9.0.6" /> |
| 19 | + <PackageVersion Include="Microsoft.EntityFrameworkCore.SqlServer" Version="9.0.6" /> |
| 20 | + <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.17" /> |
| 21 | + <PackageVersion Include="Microsoft.Extensions.Caching.Abstractions" Version="9.0.6" /> |
| 22 | + <PackageVersion Include="Microsoft.Extensions.Caching.Memory" Version="9.0.6" /> |
| 23 | + <PackageVersion Include="Microsoft.Extensions.Configuration.Abstractions" Version="9.0.6" /> |
| 24 | + <PackageVersion Include="Microsoft.Extensions.Configuration.Json" Version="9.0.6" /> |
| 25 | + <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="9.0.6" /> |
| 26 | + <PackageVersion Include="Microsoft.Extensions.FileProviders.Embedded" Version="9.0.6" /> |
| 27 | + <PackageVersion Include="Microsoft.Extensions.FileProviders.Physical" Version="9.0.6" /> |
| 28 | + <PackageVersion Include="Microsoft.Extensions.Hosting.Abstractions" Version="9.0.6" /> |
| 29 | + <PackageVersion Include="Microsoft.Extensions.Http" Version="9.0.6" /> |
| 30 | + <PackageVersion Include="Microsoft.Extensions.Identity.Core" Version="9.0.6" /> |
| 31 | + <PackageVersion Include="Microsoft.Extensions.Identity.Stores" Version="9.0.6" /> |
| 32 | + <PackageVersion Include="Microsoft.Extensions.Logging" Version="9.0.6" /> |
| 33 | + <PackageVersion Include="Microsoft.Extensions.Options" Version="9.0.6" /> |
| 34 | + <PackageVersion Include="Microsoft.Extensions.Options.ConfigurationExtensions" Version="9.0.6" /> |
| 35 | + <PackageVersion Include="Microsoft.Extensions.Options.DataAnnotations" Version="9.0.6" /> |
| 36 | + <PackageVersion Include="Microsoft.Extensions.Caching.Hybrid" Version="9.6.0" /> |
37 | 37 | </ItemGroup> |
38 | 38 | <!-- Umbraco packages --> |
39 | 39 | <ItemGroup> |
|
83 | 83 | <!-- Take top-level depedendency on Azure.Identity, because Microsoft.EntityFrameworkCore.SqlServer depends on a vulnerable version --> |
84 | 84 | <PackageVersion Include="Azure.Identity" Version="1.13.1" /> |
85 | 85 | <!-- Microsoft.EntityFrameworkCore.SqlServer brings in a vulnerable version of System.Runtime.Caching --> |
86 | | - <PackageVersion Include="System.Runtime.Caching" Version="9.0.0" /> |
| 86 | + <PackageVersion Include="System.Runtime.Caching" Version="9.0.6" /> |
87 | 87 | <!-- Dazinator.Extensions.FileProviders brings in a vulnerable version of System.Net.Http --> |
88 | 88 | <PackageVersion Include="System.Net.Http" Version="4.3.4" /> |
89 | 89 | <!-- Examine brings in a vulnerable version of System.Security.Cryptography.Xml --> |
90 | | - <PackageVersion Include="System.Security.Cryptography.Xml" Version="9.0.0" /> |
| 90 | + <PackageVersion Include="System.Security.Cryptography.Xml" Version="9.0.6" /> |
91 | 91 | <!-- Dazinator.Extensions.FileProviders and MiniProfiler.AspNetCore.Mvc brings in a vulnerable version of System.Text.RegularExpressions --> |
92 | 92 | <PackageVersion Include="System.Text.RegularExpressions" Version="4.3.1" /> |
93 | 93 | <!-- OpenIddict.AspNetCore, Npoco.SqlServer and Microsoft.EntityFrameworkCore.SqlServer brings in a vulnerable version of Microsoft.IdentityModel.JsonWebTokens --> |
94 | 94 | <!-- Take top-level depedendency on Microsoft.IdentityModel.JsonWebTokens, because OpenIddict.AspNetCore, Npoco.SqlServer and Microsoft.EntityFrameworkCore.SqlServer depends on a vulnerable version --> |
95 | 95 | <PackageVersion Include="Microsoft.IdentityModel.JsonWebTokens" Version="8.2.1" /> |
96 | 96 | <!-- Azure.Identity, Microsoft.EntityFrameworkCore.SqlServer and Dazinator.Extensions.FileProviders brings in a legacy version of System.Text.Encodings.Web --> |
97 | | - <PackageVersion Include="System.Text.Encodings.Web" Version="9.0.0" /> |
| 97 | + <PackageVersion Include="System.Text.Encodings.Web" Version="9.0.6" /> |
98 | 98 | <!-- NPoco.SqlServer brings in a vulnerable version of Microsoft.Data.SqlClient --> |
99 | 99 | <PackageVersion Include="Microsoft.Data.SqlClient" Version="5.2.2" /> |
100 | 100 | <!-- Examine.Lucene brings in a vulnerable version of Lucene.Net.Replicator --> |
|
0 commit comments