Skip to content

Commit 9c6ba54

Browse files
committed
Update packages to fix known vulnerabilities
1 parent 4b805fd commit 9c6ba54

2 files changed

Lines changed: 26 additions & 1 deletion

File tree

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"ChangeType": "Security",
3+
"Branch": "release/v7.4.8",
4+
"PackageId": "System.IO.Packaging",
5+
"FromVersion": "8.0.0",
6+
"ToVersion": "8.0.1",
7+
"VulnerabilityId": [
8+
"GHSA-QJ66-M88J-HMGJ",
9+
"CVE-2024-43483",
10+
"GHSA-F32C-W444-8PPV",
11+
"CVE-2024-43484"
12+
],
13+
"Severity": [
14+
"high"
15+
],
16+
"VulnerableRanges": [
17+
"[8.0.0-preview.1.23110.8, 8.0.0]"
18+
],
19+
"AdvisoryUrls": [
20+
"https://github.com/advisories/GHSA-qj66-m88j-hmgj",
21+
"https://github.com/advisories/GHSA-f32c-w444-8ppv"
22+
],
23+
"Justification": null,
24+
"TimestampUtc": "2026-04-03T20:46:01.9228167Z"
25+
}

src/Microsoft.PowerShell.SDK/Microsoft.PowerShell.SDK.csproj

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@
2222
<PackageReference Include="System.Data.SqlClient" Version="4.8.6" />
2323
<PackageReference Include="System.Drawing.Common" Version="8.0.13" />
2424
<!-- the following package(s) are from https://github.com/dotnet/corefx -->
25-
<PackageReference Include="System.IO.Packaging" Version="8.0.0" />
25+
<PackageReference Include="System.IO.Packaging" Version="8.0.1" />
2626
<PackageReference Include="System.Runtime.Caching" Version="8.0.1" />
2727
<PackageReference Include="System.Net.Http.WinHttpHandler" Version="8.0.2" />
2828
<PackageReference Include="System.Text.Encodings.Web" Version="8.0.0" />

0 commit comments

Comments
 (0)