NuGet/NuGet.CommandLine: low
Defense in Depth update for NuGet Client
Action: Upgrade NuGet.CommandLine to 4.9.7 (4.9.x), 5.11.7 (5.11.x), 6.8.2 (6.8.x), 6.11.2 (6.11.x), 6.12.5 (6.12.x), 6.14.3 (6.14.x), 7.0.3 (7.0.x) or 7.3.1 (7.3.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.9.0 | 4.9.7 | - |
| 5.11.0 | 5.11.7 | - |
| 6.8.0 | 6.8.2 | - |
| 6.11.0 | 6.11.2 | - |
| 6.12.0 | 6.12.5 | - |
| 6.14.0 | 6.14.3 | - |
| 7.0.0 | 7.0.3 | - |
| 7.3.0 | 7.3.1 | - |
Fixed versions
| 4.9.7 | 5.11.7 | 6.8.2 | 6.11.2 | 6.12.5 | 6.14.3 | 7.0.3 | 7.3.1 |
Sources
- osv: GHSA-g4vj-cjjj-v7hg#NuGet/NuGet.CommandLine
- https://github.com/NuGet/NuGet.Client/security/advisories/GHSA-g4vj-cjjj-v7hg
- https://github.com/NuGet/NuGetGallery/security/advisories/GHSA-9r3h-v4hx-rhfr
- https://github.com/NuGet/NuGet.Client
published · modified · JSON