# Vulnarabilites with square version 42.0.0 **URL:** \ **Category:** Questions\ **Tags:** sdk\ **Created:** [July 22, 2025, 9:18am UTC](https://developer.squareup.com/forums/t/vulnarabilites-with-square-version-42-0-0/23306 "2025-07-22T09:18:03Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![aleksandarm](https://avatars.discourse-cdn.com/v4/letter/a/c4cdca/32.png) [@aleksandarm](https://developer.squareup.com/forums/u/aleksandarm)\ **Post date:** [July 22, 2025, 9:18am UTC](https://developer.squareup.com/forums/t/vulnarabilites-with-square-version-42-0-0/23306/1 "2025-07-22T09:18:03Z")
Hello, after updating square to the latest version 42.0.0 we have received high risk vulnerabilities alerts ![image](https://global.discourse-cdn.com/square/original/2X/5/53eeba0cfbc4eaeef8a1f54d418c6f82b2f35e8e.png) Here are all the link associated with the vulnerabilities: - Denial of Service (DoS) - [CWE-400](https://cwe.mitre.org/data/definitions/400.html) - [CVE-2024-30105](https://www.cve.org/CVERecord?id=CVE-2024-30105) - [CVSS 8.7](https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N) - [SNYK-DOTNET-SYSTEMTEXTJSON-7433719](https://app.snyk.io/vuln/SNYK-DOTNET-SYSTEMTEXTJSON-7433719) - Inefficient Algorithmic Complexity - [CWE-407](https://cwe.mitre.org/data/definitions/407.html) - [CVE-2024-43485](https://www.cve.org/CVERecord?id=CVE-2024-43485) - [CVSS 8.7](https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N) - [SNYK-DOTNET-SYSTEMTEXTJSON-8168848](https://security.snyk.io/vuln/SNYK-DOTNET-SYSTEMTEXTJSON-8168848) What’s your timeline in fixing these issues? ---
**Author:** ![Square-Dev-AI](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/square-dev-ai/32/2513_2.png) [@Square-Dev-AI](https://developer.squareup.com/forums/u/Square-Dev-AI)\ **Post date:** [July 22, 2025, 4:09pm UTC](https://developer.squareup.com/forums/t/vulnarabilites-with-square-version-42-0-0/23306/2 "2025-07-22T16:09:56Z")
👋 I’m Square Dev AI, here to help answer your question! Based on the information you’ve provided, the following documentation will help answer your question: > **[Versioning in the Square API](https://developer.squareup.com/docs/build-basics/versioning-overview)** > > Learn about the Square versioning process and how it works with breaking changes. > **[Versioning in the Square API](https://developer.squareup.com/docs/build-basics/versioning)** > > Learn about the Square versioning process and how it works with breaking changes. > **Additional Documentation** > > [Get Started: What's Next](https://developer.squareup.com/docs/get-started/what-next) > [Square Developer Tools](https://developer.squareup.com/docs/devtools/overview) > [Basics of Building Applications](https://developer.squareup.com/docs/buildbasics) If this documentation helped you find a solution, please check the box indicating that this reply solves the problem. Otherwise one of our Developer Advocates will provide additional assistance shortly. ---
**Author:** ![jhardin\_accumula](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/jhardin_accumula/32/9412_2.png) [@jhardin\_accumula](https://developer.squareup.com/forums/u/jhardin_accumula)\ **Post date:** [July 22, 2025, 7:36pm UTC](https://developer.squareup.com/forums/t/vulnarabilites-with-square-version-42-0-0/23306/3 "2025-07-22T19:36:23Z")
That appears to have been addressed at least 4 months ago: ```auto ``` > **[Blaming square-dotnet-sdk/src/Square/Square.csproj at...](https://github.com/square/square-dotnet-sdk/blame/b2b3176d9758826da3ff15dc75d9a07cd65c4e3a/src/Square/Square.csproj#L39)** > > .NET client library for the Square API. Contribute to square/square-dotnet-sdk development by creating an account on GitHub. ---
**Author:** ![Bryan-Square](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/bryan-square/32/38_2.png) [@Bryan-Square](https://developer.squareup.com/forums/u/Bryan-Square)\ **Post date:** [July 22, 2025, 11:20pm UTC](https://developer.squareup.com/forums/t/vulnarabilites-with-square-version-42-0-0/23306/4 "2025-07-22T23:20:59Z")
I’ve passed this along to the team. 🙂 ---
**Author:** ![aleksandarm](https://avatars.discourse-cdn.com/v4/letter/a/c4cdca/32.png) [@aleksandarm](https://developer.squareup.com/forums/u/aleksandarm)\ **Post date:** [September 11, 2025, 1:56pm UTC](https://developer.squareup.com/forums/t/vulnarabilites-with-square-version-42-0-0/23306/5 "2025-09-11T13:56:51Z")
Hello @Bryan-Square , Just wanted to check if there’s any update on this topic. I have upgraded to Square@42.0.2, but I am still seeing this vulnerability ---
**Author:** ![Bryan-Square](https://sea1.discourse-cdn.com/square/forums/user_avatar/developer.squareup.com/bryan-square/32/38_2.png) [@Bryan-Square](https://developer.squareup.com/forums/u/Bryan-Square)\ **Post date:** [September 11, 2025, 4:34pm UTC](https://developer.squareup.com/forums/t/vulnarabilites-with-square-version-42-0-0/23306/6 "2025-09-11T16:34:28Z")
Are you seeing the same vulnerabilities? This was addressed. 🙂 ---
**Author:** ![aleksandarm](https://avatars.discourse-cdn.com/v4/letter/a/c4cdca/32.png) [@aleksandarm](https://developer.squareup.com/forums/u/aleksandarm)\ **Post date:** [September 12, 2025, 9:42am UTC](https://developer.squareup.com/forums/t/vulnarabilites-with-square-version-42-0-0/23306/7 "2025-09-12T09:42:37Z")
Yeah, I am seeing the same vulnerability. ![image](https://global.discourse-cdn.com/square/original/2X/e/e1fc1b8a44aaa80411759d28668d0530be61fdd8.png) I saw that it was fixed in the repository, as jhardin\_accumula commented, but for some reason it doesn’t appear so through snyk dashboard. I updated the package to the latest version Is there any additional action I have to take?