Skip to content

Package 'System.Text.Json' 6.0.0 has a known high severity vulnerability #192

Closed

Description

@jasonzoladz

When building a project that includes a classlib using FSharp.SystemTextJson one encounters the warning:

Package 'System.Text.Json' 6.0.0 has a known high severity vulnerability

That vulnerability is discussed here.

I realize that the vulnerability only concerns JSON models that utilize [JsonExtensionData] and that this repo's code does not use it. However, the warning appears for users and can be removed by updating the dependency to the patched version.

Activity

  1. games commented on Dec 19, 2024

    @games

    Same issue here

  2. added a commit that references this issue on Dec 23, 2024
  3. Tarmil commented on Jun 14, 2025

    @Tarmil
    Owner

    This is fixed in v1.4: the minimum dependency is now 6.0.10.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions