Update Microsoft.AspNetCore.SignalR.Client version to fix System.Text…

….Json vulnerability (#883)
aws · Nov 14, 2024 · 4efd115 · 4efd115
1 parent e810ffe
commit 4efd115
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 1 deletion.
diff --git a/.autover/changes/27d0ce13-f148-4129-a977-1ae2fa1b36e4.json b/.autover/changes/27d0ce13-f148-4129-a977-1ae2fa1b36e4.json
@@ -0,0 +1,11 @@
+{
+  "Projects": [
+    {
+      "Name": "AWS.Deploy.ServerMode.Client",
+      "Type": "Patch",
+      "ChangelogMessages": [
+        "Update Microsoft.AspNetCore.SignalR.Client version to fix System.Text.Json vulnerability"
+      ]
+    }
+  ]
+}
diff --git a/src/AWS.Deploy.ServerMode.Client/AWS.Deploy.ServerMode.Client.csproj b/src/AWS.Deploy.ServerMode.Client/AWS.Deploy.ServerMode.Client.csproj
@@ -17,7 +17,7 @@
 
   <ItemGroup>
     <PackageReference Include="AWSSDK.Core" Version="3.7.303.20" />
-    <PackageReference Include="Microsoft.AspNetCore.SignalR.Client" Version="6.0.22" />
+    <PackageReference Include="Microsoft.AspNetCore.SignalR.Client" Version="6.0.36" />
     <!-- We are pining Newtonsoft.Json to 13.0.1 to maintain compatibility with the VS Toolkit.
     https://devblogs.microsoft.com/visualstudio/using-newtonsoft-json-in-a-visual-studio-extension/-->
     <PackageReference Include="Newtonsoft.Json" Version="13.0.1" />