Issue: Remove Temporary Dependencies on System.Net.Http and System.Text.RegularExpressions
Description
Currently, we have added explicit dependencies on the following packages due to security vulnerabilities in the versions included with .NET 9.0:
<PackageReference Include="System.Net.Http" Version="4.3.4" />
<PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" />
These dependencies should be removed once the .NET 9.0 SDK is updated with patched versions of these libraries.
Justification
- These dependencies are temporary workarounds for security vulnerabilities
- We should aim to use the versions included with the .NET SDK whenever possible
- Removing these explicit dependencies will reduce potential version conflicts
Tasks
Security Considerations
This issue should be addressed only after confirming that the versions included with the updated .NET 9.0 SDK no longer contain the security vulnerabilities.
Issue: Remove Temporary Dependencies on System.Net.Http and System.Text.RegularExpressions
Description
Currently, we have added explicit dependencies on the following packages due to security vulnerabilities in the versions included with .NET 9.0:
These dependencies should be removed once the .NET 9.0 SDK is updated with patched versions of these libraries.
Justification
Tasks
Security Considerations
This issue should be addressed only after confirming that the versions included with the updated .NET 9.0 SDK no longer contain the security vulnerabilities.