From 273955b35c2d1ba3ffc09861d54f324d3e1114d7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Apr 2026 02:33:35 +0000
Subject: [PATCH] Bump log4net from 2.0.8 to 3.3.0

---
updated-dependencies:
- dependency-name: log4net
  dependency-version: 3.3.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 vulnerable_asp_net_core/vulnerable_asp_net_core.csproj | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/vulnerable_asp_net_core/vulnerable_asp_net_core.csproj b/vulnerable_asp_net_core/vulnerable_asp_net_core.csproj
index 4109d96..bb82d2c 100644
--- a/vulnerable_asp_net_core/vulnerable_asp_net_core.csproj
+++ b/vulnerable_asp_net_core/vulnerable_asp_net_core.csproj
@@ -12,7 +12,7 @@
     <PackageReference Include="Microsoft.VisualStudio.Web.CodeGeneration.Design" Version="2.1.1" />
     <PackageReference Include="System.Data.SQLite.Core" Version="1.0.109.2" />
     <PackageReference Include="System.Text.Encodings.Web" Version="4.5.0" />
-    <PackageReference Include="log4net" Version="2.0.8" />
+    <PackageReference Include="log4net" Version="3.3.0" />
   </ItemGroup>
 
   <ItemGroup>