Skip to content

Fix vulnerable System.Text.Json 8.0.0 dependancy #15

@HugoVG

Description

@HugoVG

with the introduction of dotnet 9 preview 6 SDK and the new transitive dependency checker it came to my attention that Toolbelt.Blazor.HttpClientInterceptor uses an out of date version of System.Text.Json.
I fixed this in #14 which also makes the library more natively Dotnet 8 and changed the dependency to only use what is necessary instead of Microsoft.AspNetCore.Components.WebAssembly

Steps to reproduce

dotnet 9 preview 6 SDK

dotnet nuget why .\-----.csproj System.Text.Json
  └─ Toolbelt.Blazor.LoadingBar (v14.0.0) <-- My direct dependency 
      └─ Toolbelt.Blazor.HttpClientInterceptor (v10.0.0) <-- Transitive dependency 
         └─ Microsoft.AspNetCore.Components.WebAssembly (v8.0.7)
            └─ Microsoft.Extensions.Configuration.Json (v8.0.0)
               └─ System.Text.Json (v8.0.0)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions