dotnet/roslyn-sdk

Security: Update Nuget.* package references for Microsoft.CodeAnalysis.Analyzer.Testing

nschuessler opened this issue · 1 comments

Our project has indirect dependency on Nuget.Protocol via this nuget. It is triggering a security warning:

CVE-2022-41032 NuGet.Protocol 5.6.0

Can we get a rebuild with newer version?

dotnet/announcements#236

image

This was fixed by #1058. Updated packages are published to the dotnet-tools feed.