Pin System.Private.Uri in SDK to fix CVEs reported

2025-12-10 04:06:57 +00:00 · 2024-03-15 18:04:56 +01:00
1 changed files with 2 additions and 0 deletions
--- a/src/Sdk/Sdk.csproj
+++ b/src/Sdk/Sdk.csproj
@@ -21,6 +21,8 @@
        <PackageReference Include="System.Security.Cryptography.Cng" Version="4.4.0" />
        <PackageReference Include="System.Security.Cryptography.Pkcs" Version="4.4.0" />
        <PackageReference Include="System.Security.Cryptography.ProtectedData" Version="4.4.0" />
+        <PackageReference Include="System.Private.Uri" Version="4.3.2" />
+        <PackageReference Include="runtime.unix.System.Private.Uri" Version="4.3.2" />
        <PackageReference Include="Minimatch" Version="2.0.0" />
        <PackageReference Include="YamlDotNet.Signed" Version="5.3.0" />
        <PackageReference Include="System.Net.Http" Version="4.3.4" />