Skip to content

Commit 1ad160b

Browse files
authored
Upgrade System.Text.Json to 8.0.4 for CVE-2024-30105 (#102)
* bump System.Text.Json to 8.0.4 for CVE-2024-30105 GHSA-hh2w-p6rv-4g7w * CHANGELOG entry
1 parent 2425736 commit 1ad160b

File tree

2 files changed

+8
-1
lines changed

2 files changed

+8
-1
lines changed

CHANGELOG.md

+7
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,12 @@
11
# Changelog
22

3+
## Unreleased
4+
5+
### Bug Fixes
6+
7+
* Use 8.0.4 of System.Text.Json to remediate CVE-2024-30105
8+
([#102](https://github.com/grafana/grafana-opentelemetry-dotnet/pull/102))
9+
310
## 0.8.1-beta.1
411

512
### BREAKING CHANGES

src/Grafana.OpenTelemetry.Base/Grafana.OpenTelemetry.Base.csproj

+1-1
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@
2222
<PackageReference Include="Microsoft.Extensions.Configuration" Version="8.0.0" />
2323
<PackageReference Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="8.0.0" />
2424
<PackageReference Include="Microsoft.Extensions.Logging" Version="8.0.0" />
25-
<PackageReference Include="System.Text.Json" Version="8.0.0" />
25+
<PackageReference Include="System.Text.Json" Version="8.0.4" />
2626
<PackageReference Include="MinVer" Version="4.3.0">
2727
<PrivateAssets>all</PrivateAssets>
2828
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>

0 commit comments

Comments
 (0)