fluentassertions / fluentassertions / 30352613172

97%

push

github

Pin System.Security.Cryptography.Xml to patched version in build tooling (#3283)

Build/_build.csproj transitively pulled in System.Security.Cryptography.Xml
10.0.6, which has several known high-severity DoS vulnerabilities. Since
Directory.Build.props sets TreatWarningsAsErrors, NuGet's audit warning
(NU1903) is escalated to a build error, breaking restore for the Build
project on every PR/branch (including #3282), unrelated to any code change.

Pin a direct PackageReference to the patched 10.0.10 version to override
the vulnerable transitive dependency.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

4100 of 4384 branches covered (93.52%)

Branch coverage included in aggregate %.

13178 of 13403 relevant lines covered (98.32%)

89978.87 hits per line