Skip to content

Remove Temporary Dependencies on System.Net.Http and System.Text.RegularExpressions #8

@longkerdandy

Description

@longkerdandy

Issue: Remove Temporary Dependencies on System.Net.Http and System.Text.RegularExpressions

Description

Currently, we have added explicit dependencies on the following packages due to security vulnerabilities in the versions included with .NET 9.0:

<PackageReference Include="System.Net.Http" Version="4.3.4" />
<PackageReference Include="System.Text.RegularExpressions" Version="4.3.1" />

These dependencies should be removed once the .NET 9.0 SDK is updated with patched versions of these libraries.

Justification

  • These dependencies are temporary workarounds for security vulnerabilities
  • We should aim to use the versions included with the .NET SDK whenever possible
  • Removing these explicit dependencies will reduce potential version conflicts

Tasks

  • Monitor .NET 9.0 SDK updates for patched versions of these libraries
  • Remove the explicit dependencies when safe to do so
  • Test the application thoroughly after removing dependencies to ensure functionality is maintained

Security Considerations

This issue should be addressed only after confirming that the versions included with the updated .NET 9.0 SDK no longer contain the security vulnerabilities.

Metadata

Metadata

Assignees

No one assigned

    Labels

    wontfixThis will not be worked on

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions