Fix RCE attribute injection in generated Refit clients (GHSA-3fhm-p725-h3g3, GHSA-58x9-vjvp-6mx8, GHSA-p32v-8v8j-j534)#1178
Open
christianhelle wants to merge 18 commits into
Annotations
4 notices
|
submit-dependency-snapshot
Snapshot successfully created at 2026-06-30T14:59:47.772Z
|
|
submit-dependency-snapshot
{
"manifests": {
"test/HelloWorld/HelloWorld/HelloWorld.csproj": {
"resolved": {
"pkg:nuget/System.IO.Pipelines@10.0.8": {
"package_url": "pkg:nuget/System.IO.Pipelines@10.0.8",
"relationship": "indirect",
"scope": "runtime",
"dependencies": []
},
"pkg:nuget/System.Text.Json@10.0.8": {
"package_url": "pkg:nuget/System.Text.Json@10.0.8",
"relationship": "direct",
"scope": "runtime",
"dependencies": [
"pkg:nuget/System.IO.Pipelines@10.0.8",
"pkg:nuget/System.Text.Encodings.Web@10.0.8"
]
},
"pkg:nuget/Refit@11.0.1": {
"package_url": "pkg:nuget/Refit@11.0.1",
"relationship": "direct",
"scope": "runtime",
"dependencies": [
"pkg:nuget/System.IO.Pipelines@10.0.8",
"pkg:nuget/System.Text.Json@10.0.8",
"pkg:nuget/System.Text.Encodings.Web@10.0.8",
"pkg:nuget/Microsoft.Bcl.AsyncInterfaces@10.0.8",
"pkg:nuget/System.Runtime.CompilerServices.Unsafe@6.1.2",
"pkg:nuget/System.Buffers@4.6.1",
"pkg:nuget/System.Memory@4.6.3",
"pkg:nuget/System.ValueTuple@4.6.2",
"pkg:nuget/System.Numerics.Vectors@4.6.1",
"pkg:nuget/System.Net.Http.Json@10.0.8",
"pkg:nuget/System.Threading.Tasks.Extensions@4.6.3"
]
},
"pkg:nuget/System.Text.Encodings.Web@10.0.8": {
"package_url": "pkg:nuget/System.Text.Encodings.Web@10.0.8",
"relationship": "indirect",
"scope": "runtime",
"dependencies": []
}
},
"name": "test/HelloWorld/HelloWorld/HelloWorld.csproj",
"file": {
"source_location": "test/HelloWorld/HelloWorld/HelloWorld.csproj"
}
},
"src/Refitter/Refitter.csproj": {
"resolved": {
"pkg:nuget/System.IO.Pipelines@10.0.8": {
"package_url": "pkg:nuget/System.IO.Pipelines@10.0.8",
"relationship": "indirect",
"scope": "runtime",
"dependencies": []
},
"pkg:nuget/System.Text.Json@10.0.8": {
"package_url": "pkg:nuget/System.Text.Json@10.0.8",
"relationship": "direct",
"scope": "runtime",
"dependencies": [
"pkg:nuget/System.IO.Pipelines@10.0.8",
"pkg:nuget/System.Text.Encodings.Web@10.0.8"
]
},
"pkg:nuget/System.Text.Encodings.Web@10.0.8": {
"package_url": "pkg:nuget/System.Text.Encodings.Web@10.0.8",
"relationship": "indirect",
"scope": "runtime",
"dependencies": []
},
"pkg:nuget/System.Security.Permissions@6.0.0": {
"package_url": "pkg:nuget/System.Security.Permissions@6.0.0",
"relationship": "indirect",
"scope": "runtime",
"dependencies": []
},
"pkg:nuget/Microsoft.Extensions.Caching.Memory@1.0.0": {
"package_url": "pkg:nuget/Microsoft.Extensions.Caching.Memory@1.0.0",
"relationship": "indirect",
"scope": "runtime",
"dependencies": []
},
"pkg:nuget/Microsoft.Extensions.Primitives@8.0.0": {
"package_url": "pkg:nuget/
|
|
submit-dependency-snapshot
Submitting snapshot...
|
|
log-toolchain-versions
Using .NET SDK version: 10.0.301
|
background
wait
wait-all
cancel
parallel
Loading