Merge pull request #283 from myob-oss/ag/MRA-1254

MRA-1254 Fix Nancy 1.2 Critical vulnerability - project files
myob-oss · Oct 23, 2024 · 9f9ecd7 · 9f9ecd7
2 parents 823412c + 3654d2f
commit 9f9ecd7
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 4 deletions.
diff --git a/MYOB.API.SDK/SDK.Test/App.config b/MYOB.API.SDK/SDK.Test/App.config
@@ -11,6 +11,14 @@
         <assemblyIdentity name="Newtonsoft.Json" publicKeyToken="30ad4fe6b2a6aeed" culture="neutral" />
         <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
       </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="Nancy" publicKeyToken="null" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-1.4.5.0" newVersion="1.4.5.0" />
+      </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="Nancy.Hosting.Self" publicKeyToken="null" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-1.2.0.0" newVersion="1.2.0.0" />
+      </dependentAssembly>
     </assemblyBinding>
   </runtime>
 </configuration>
diff --git a/MYOB.API.SDK/SDK.Test/SDK.Test.csproj b/MYOB.API.SDK/SDK.Test/SDK.Test.csproj
@@ -66,9 +66,8 @@
     <AssemblyOriginatorKeyFile>MYOB.API.SDK.TEST.snk</AssemblyOriginatorKeyFile>
   </PropertyGroup>
   <ItemGroup>
-    <Reference Include="Nancy, Version=1.2.0.0, Culture=neutral, processorArchitecture=MSIL">
-      <HintPath>$(SolutionDir)\packages\Nancy.1.2.0\lib\net40\Nancy.dll</HintPath>
-      <Private>True</Private>
+    <Reference Include="Nancy, Version=1.4.5.0, Culture=neutral, processorArchitecture=MSIL">
+      <HintPath>$(SolutionDir)\Nancy.1.4.5\lib\net40\Nancy.dll</HintPath>
     </Reference>
     <Reference Include="Nancy.Hosting.Self, Version=1.2.0.0, Culture=neutral, processorArchitecture=MSIL">
       <HintPath>$(SolutionDir)\packages\Nancy.Hosting.Self.1.2.0\lib\net40\Nancy.Hosting.Self.dll</HintPath>

diff --git a/MYOB.API.SDK/SDK.Test/packages.config b/MYOB.API.SDK/SDK.Test/packages.config
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
-  <package id="Nancy" version="1.4.4" targetFramework="net45" />
+  <package id="Nancy" version="1.4.5" targetFramework="net45" />
   <package id="Nancy.Hosting.Self" version="1.2.0" targetFramework="net45" />
   <package id="Newtonsoft.Json" version="7.0.1" targetFramework="net45" />
   <package id="NSubstitute" version="1.8.2.0" targetFramework="net45" />