NuGet/Umbraco.Headless.Client.Net: low
The Umbraco Heartcore headless client library uses a vulnerable Refit dependency package
Action: Upgrade Umbraco.Headless.Client.Net to 1.5.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.0 | - |
Fixed versions
| 1.5.0 |
Sources
- osv: GHSA-mgr7-5782-6jh9
- https://github.com/reactiveui/refit/security/advisories/GHSA-3hxg-fxwm-8gf7
- https://github.com/umbraco/Umbraco.Headless.Client.Net/security/advisories/GHSA-mgr7-5782-6jh9
- https://nvd.nist.gov/vuln/detail/CVE-2024-51501
- https://github.com/umbraco/Umbraco.Headless.Client.Net
published · modified · JSON