Reputation: 1873
When I run dotnet-svcutil
(latest, v2.1.0) for my .NET 8 project, I get several security warnings for out-of-date dependencies it's using. For example:
warning NU1903: Package 'System.Security.Cryptography.Pkcs' 6.0.1 has a known high severity vulnerability, https://github.com/advisories/GHSA-555c-2p6r-68mm
I've done everything I can to specify that .NET 8 dependencies should be used, including:
<TargetFramework>net8.0</TargetFramework>
specified.--targetFramework "net8.0"
specifiedHow can I make sure the tool uses up-to-date dependencies?
Upvotes: 1
Views: 617