yv01p/Umbraco-CMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added direct dependency to secure version of Microsoft.Build.Tasks.Core in Umbraco.Web.UI (#20546)

Browse Source 
Added direct dependency to secure version of Microsoft.Build.Tasks.Core in Umbraco.Web.UI.
This commit is contained in:
Andy Butland
2025-10-20 11:54:26 +02:00
committed by GitHub
parent 92dbaf7162
commit a808e3ab46
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/Umbraco.Web.UI/Umbraco.Web.UI.csproj
View File

@@ -26,6 +26,11 @@
<ItemGroup>
<!-- Add design/build time support for EF Core migrations -->
<PackageReference Include="Microsoft.EntityFrameworkCore.Design" PrivateAssets="all" Version="10.0.0-rc.2.25502.107" />
<!--
Added the following direct dependency due to Microsoft.EntityFrameworkCore.Design having a dependency on an insecure version.
Review for removal when Microsoft.EntityFrameworkCore.Design is updated to a newer version.
-->
<PackageReference Include="Microsoft.Build.Tasks.Core" PrivateAssets="all" Version="17.14.28" />
</ItemGroup>
<ItemGroup>