question

jonathanpaullin avatar image
jonathanpaullin asked

Please update PlayFab SDK C# nuget package to remove Newtonsoft.Json vulnerability

Hello,
I noticed while building a Docker image with the latest version of the PlayFab SDK from nuget (0.11.210519) that there was a vulnerability warning with Newtonsoft. This was fixed on github which has a newer version, but was not published to nuget. From the comments on github... "Bump Newtonsoft.Json from 11.0.2 to 13.0.1" https://github.com/PlayFab/gsdk/tree/main/csharp

It would be great if you could republish the latest version of the github repo to nuget to remove this vulnerability.

Thanks! Jonathan

sdks
10 |1200
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

1 Answer

·
Simon Cui avatar image
Simon Cui answered

Thank you very much for your report. Currently you can just manually update the Newtonsoft.Json to the latest version in your project to avoid vulnerability warning. Sorry for the inconvenience.

10 |1200
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.