NuGet/Microsoft.Bot.Connector: high
Improper Authentication
Action: Upgrade Microsoft.Bot.Connector to 4.6.4 (4.6.x), 4.7.3 (4.7.x), 4.8.2 (4.8.x), 4.9.5 (4.9.x) or 4.10.3 (4.10.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.6.0 | 4.6.4 | - |
| 4.7.0 | 4.7.3 | - |
| 4.8.0 | 4.8.2 | - |
| 4.9.0 | 4.9.5 | - |
| 4.10.0 | 4.10.3 | - |
Fixed versions
| 4.6.4 | 4.7.3 | 4.8.2 | 4.9.5 | 4.10.3 |
Sources
- osv: GHSA-qxx8-292g-2w66
- https://github.com/microsoft/botbuilder-dotnet/security/advisories/GHSA-qxx8-292g-2w66
- https://aka.ms/SkillClaimsValidationDotnet
- https://www.nuget.org/packages/Microsoft.Bot.Connector
published · modified · JSON