How do we correctly work with Nuggets that require Newtonsoft v13?
How do we correctly work with Nuggets that require Newtonsoft v13?
Due to the nature of how JSON.net is distributed, you are limited the version that is also used by community.
Due to the nature of how JSON.net is distributed, you are limited the version that is also used by community.
Version 9 was released back in 2016 and currently has at least one high severity vulnerability. https://www.nuget.org/packages/newtonsoft.json/9.0.1 When will the community upgrade? This is causing a large roadblock for our development efforts.
We don't publicly provide dates for any particular fixes or releases. The particular vulnerability you are referring to will be mitigated against in 12.1.4(also note any custom code is perfectly capable of mitigating against this as well, though in the community process not necessary in 12.1.4)