Vulnarabilites with square version 42.0.0

Questions
1

Hello, after updating square to the latest version 42.0.0 we have received high risk vulnerabilities alerts

image
image965×653 41.8 KB

Here are all the link associated with the vulnerabilities:

What’s your timeline in fixing these issues?

2

:waving_hand: I’m Square Dev AI, here to help answer your question!
Based on the information you’ve provided, the following documentation will help answer your question:

Additional Documentation

Get Started: What's Next
Square Developer Tools
Basics of Building Applications

If this documentation helped you find a solution, please check the box indicating that this reply solves the problem.
Otherwise one of our Developer Advocates will provide additional assistance shortly.

3

That appears to have been addressed at least 4 months ago:

<PackageReference Include="System.Text.Json" Version="8.0.5" />
1 Like
4

I’ve passed this along to the team. :slight_smile:

1 Like
5

Hello @Bryan-Square ,

Just wanted to check if there’s any update on this topic. I have upgraded to [email protected], but I am still seeing this vulnerability

6

Are you seeing the same vulnerabilities? This was addressed. :slight_smile:

7

Yeah, I am seeing the same vulnerability.

image
image1155×835 62.9 KB

I saw that it was fixed in the repository, as jhardin_accumula commented, but for some reason it doesn’t appear so through snyk dashboard.

I updated the package to the latest version
Is there any additional action I have to take?