Fix BodyParser

examples-Aspire/AspireApp1.AppHost/AspireApp1.AppHost.csproj

@@ -18,7 +18,10 @@
     </ItemGroup>
 
     <ItemGroup>
-        <PackageReference Include="Aspire.Hosting.AppHost" Version="13.4.0" />
+        <PackageReference Include="Aspire.Hosting.AppHost" Version="13.4.3" />
+
+        <!-- CVE-2026-48109 -->
+        <PackageReference Include="MessagePack" Version="2.5.302" />
     </ItemGroup>
 
     <ItemGroup>

examples-Aspire/AspireApp1.AppHostOriginal/AspireApp1.AppHostOriginal.csproj

@@ -15,7 +15,10 @@
     </ItemGroup>
 
     <ItemGroup>
-        <PackageReference Include="Aspire.Hosting.AppHost" Version="13.4.0" />
+        <PackageReference Include="Aspire.Hosting.AppHost" Version="13.4.3" />
+
+        <!-- CVE-2026-48109 -->
+        <PackageReference Include="MessagePack" Version="2.5.302" />
     </ItemGroup>
 
 </Project>

examples/WireMock.Net.Console.GrpcClient/WireMock.Net.Console.GrpcClient.csproj

@@ -9,9 +9,9 @@
     </PropertyGroup>
 
     <ItemGroup>
-        <PackageReference Include="Google.Protobuf" Version="3.25.1" />
-        <PackageReference Include="Grpc.Net.Client" Version="2.60.0" />
-        <PackageReference Include="Grpc.Tools" Version="2.60.0">
+        <PackageReference Include="Google.Protobuf" Version="3.33.5" />
+        <PackageReference Include="Grpc.Net.Client" Version="2.76.0" />
+        <PackageReference Include="Grpc.Tools" Version="2.78.0">
             <PrivateAssets>all</PrivateAssets>
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
         </PackageReference>

examples/WireMock.Net.ConsoleApp.UsingNuGet/WireMock.Net.ConsoleApp.UsingNuGet.csproj

@@ -16,7 +16,7 @@
   </ItemGroup>
 
   <ItemGroup>
-    <PackageReference Include="WireMock.Net" Version="2.6.0" />
+    <PackageReference Include="WireMock.Net" Version="2.10.0" />
   </ItemGroup>
 
 </Project>

examples/WireMock.Net.Service/WireMock.Net.Service.csproj

@@ -97,7 +97,7 @@
       <Version>2.3.9</Version>
     </PackageReference>
     <PackageReference Include="WireMock.Net">
-      <Version>1.25.0</Version>
+      <Version>2.10.0</Version>
     </PackageReference>
   </ItemGroup>
   <Import Project="$(MSBuildToolsPath)\Microsoft.CSharp.targets" />

examples/WireMock.Net.WebApplication.IIS/WireMock.Net.WebApplication.IIS.csproj

@@ -11,7 +11,7 @@
     </PropertyGroup>
 
     <ItemGroup>
-        <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="8.0.0" />
+        <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="8.0.1" />
     </ItemGroup>
 
     <ItemGroup>

src/WireMock.Net.Abstractions/WireMock.Net.Abstractions.csproj

@@ -39,7 +39,7 @@
     </ItemGroup>-->
 
     <ItemGroup>
-        <PackageReference Include="FluentBuilder" Version="0.14.0">
+        <PackageReference Include="FluentBuilder" Version="0.15.0">
             <PrivateAssets>all</PrivateAssets>
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
         </PackageReference>

src/WireMock.Net.Aspire/WireMock.Net.Aspire.csproj

@@ -45,7 +45,10 @@
     </PropertyGroup>
 
     <ItemGroup>
-        <PackageReference Include="Aspire.Hosting" Version="13.4.0" />
+        <PackageReference Include="Aspire.Hosting" Version="13.4.3" />
+
+        <!-- CVE-2026-48109 -->
+        <PackageReference Include="MessagePack" Version="2.5.302" />
     </ItemGroup>
 
     <ItemGroup>

src/WireMock.Net.MimePart/WireMock.Net.MimePart.csproj

@@ -36,7 +36,7 @@
     </PropertyGroup>
 
     <ItemGroup>
-        <PackageReference Include="Stef.Validation" Version="0.2.0" />
+        <PackageReference Include="Stef.Validation" Version="0.3.0" />
     </ItemGroup>
 
     <ItemGroup Condition="'$(Configuration)' == 'Debug'">

src/WireMock.Net.NUnit/WireMock.Net.NUnit.csproj

@@ -27,7 +27,7 @@
     <ItemGroup>
         <PackageReference Include="JsonConverter.Newtonsoft.Json" Version="0.13.0" />
         <PackageReference Include="NUnit" Version="4.4.0" />
-        <PackageReference Include="Stef.Validation" Version="0.2.0" />
+        <PackageReference Include="Stef.Validation" Version="0.3.0" />
     </ItemGroup>
 
     <ItemGroup>

src/WireMock.Net.OpenApiParser/WireMock.Net.OpenApiParser.csproj

@@ -43,7 +43,7 @@
         <PackageReference Include="RamlToOpenApiConverter.SourceOnly" Version="0.11.0" />
         <PackageReference Include="YamlDotNet" Version="16.3.0" />
         <PackageReference Include="RandomDataGenerator.Net" Version="1.0.19.1" />
-        <PackageReference Include="Stef.Validation" Version="0.2.0" />
+        <PackageReference Include="Stef.Validation" Version="0.3.0" />
     </ItemGroup>
 
     <ItemGroup Condition="'$(Configuration)' == 'Debug'">

src/WireMock.Net.RestClient/WireMock.Net.RestClient.csproj

@@ -35,7 +35,7 @@
     <ItemGroup>
         <PackageReference Include="JsonConverter.Newtonsoft.Json" Version="0.13.0" />
         <PackageReference Include="RestEase" Version="1.6.4" />
-        <PackageReference Include="Stef.Validation" Version="0.2.0" />
+        <PackageReference Include="Stef.Validation" Version="0.3.0" />
     </ItemGroup>
 
     <ItemGroup>

src/WireMock.Net.Shared/Settings/WireMockServerSettings.cs

@@ -305,12 +305,6 @@ public class WireMockServerSettings
     [PublicAPI, JsonIgnore]
     public IDictionary<string, Func<MatcherModel, IMatcher>>? CustomMatcherMappings { get; set; }
 
-    /// <summary>
-    /// The <see cref="JsonSerializerSettings"/> used when the JSON response is generated.
-    /// </summary>
-    [PublicAPI, JsonIgnore]
-    public JsonSerializerSettings? JsonSerializerSettings { get; set; }
-
     /// <summary>
     /// The Culture to use.
     /// Currently used for:

src/WireMock.Net.Shared/Util/BodyParser.cs

@@ -5,6 +5,7 @@ using System.Text;
 using Stef.Validation;
 using WireMock.Constants;
 using WireMock.Matchers;
+using WireMock.Serialization;
 using WireMock.Types;
 
 namespace WireMock.Util;
@@ -25,7 +26,7 @@ internal static class BodyParser
         CONNECT - No defined body semantics
         PATCH - Body supported.
     */
-    private static readonly IDictionary<string, bool> BodyAllowedForMethods = new Dictionary<string, bool>
+    private static readonly Dictionary<string, bool> BodyAllowedForMethods = new()
     {
         { HttpRequestMethod.HEAD, false },
         { HttpRequestMethod.GET, false },
@@ -173,7 +174,7 @@ internal static class BodyParser
             {
                 try
                 {
-                    data.BodyAsJson = settings.DefaultJsonConverter.Deserialize<object>(data.BodyAsString);
+                    data.BodyAsJson = settings.DefaultJsonConverter.Deserialize<object>(data.BodyAsString, JsonSerializationConstants.JsonConverterOptionsWithDateParsingNone);
                     data.DetectedBodyType = BodyType.Json;
                 }
                 catch

src/WireMock.Net.Shared/WireMock.Net.Shared.csproj

@@ -27,7 +27,7 @@
 
     <ItemGroup>
         <PackageReference Include="Microsoft.AspNetCore.Http" Version="2.3.9" />
-        <PackageReference Include="Stef.Validation" Version="0.2.0" />
+        <PackageReference Include="Stef.Validation" Version="0.3.0" />
         <PackageReference Include="AnyOf" Version="0.5.0.1" />
         <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="8.0.2" />
         <PackageReference Include="JsonConverter.Newtonsoft.Json" Version="0.13.0" />

src/WireMock.Net.TUnit/WireMock.Net.TUnit.csproj

@@ -27,7 +27,7 @@
 
     <ItemGroup>
         <PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
-        <PackageReference Include="Stef.Validation" Version="0.2.0" />
+        <PackageReference Include="Stef.Validation" Version="0.3.0" />
         <PackageReference Include="TUnit.Core" Version="1.17.29" />
     </ItemGroup>
 

src/WireMock.Net.Testcontainers/WireMock.Net.Testcontainers.csproj

@@ -38,7 +38,7 @@
             <PrivateAssets>all</PrivateAssets>
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
         </PackageReference>
-        <PackageReference Include="Stef.Validation" Version="0.2.0" />
+        <PackageReference Include="Stef.Validation" Version="0.3.0" />
         <PackageReference Include="Testcontainers" Version="4.12.0" />
     </ItemGroup>
 

src/WireMock.Net.xUnit.v3/WireMock.Net.xUnit.v3.csproj

@@ -23,7 +23,7 @@
 
     <ItemGroup>
         <PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
-        <PackageReference Include="Stef.Validation" Version="0.2.0" />
+        <PackageReference Include="Stef.Validation" Version="0.3.0" />
         <PackageReference Include="xunit.v3.extensibility.core" Version="3.2.2" />
     </ItemGroup>
 

src/WireMock.Net.xUnit/WireMock.Net.xUnit.csproj

@@ -26,7 +26,7 @@
 
     <ItemGroup>
         <PackageReference Include="Newtonsoft.Json" Version="13.0.4" />
-        <PackageReference Include="Stef.Validation" Version="0.2.0" />
+        <PackageReference Include="Stef.Validation" Version="0.3.0" />
         <PackageReference Include="xUnit.abstractions" Version="2.0.3" />
     </ItemGroup>
 

test/WireMock.Net.Aspire.TestAppHost/WireMock.Net.Aspire.TestAppHost.csproj

@@ -19,7 +19,10 @@
     </ItemGroup>
 
     <ItemGroup>
-        <PackageReference Include="Aspire.Hosting.AppHost" Version="13.4.0" />
+        <PackageReference Include="Aspire.Hosting.AppHost" Version="13.4.3" />
+
+        <!-- CVE-2026-48109 -->
+        <PackageReference Include="MessagePack" Version="2.5.302" />
     </ItemGroup>
 
     <ItemGroup>

test/WireMock.Net.Aspire.Tests/WireMock.Net.Aspire.Tests.csproj

@@ -14,7 +14,7 @@
     </PropertyGroup>
 
     <ItemGroup>
-        <PackageReference Include="Aspire.Hosting.Testing" Version="13.4.0" />
+        <PackageReference Include="Aspire.Hosting.Testing" Version="13.4.3" />
         <PackageReference Include="Codecov" Version="1.13.0" />
         <PackageReference Include="coverlet.msbuild" Version="6.0.4">
             <PrivateAssets>all</PrivateAssets>
@@ -32,6 +32,9 @@
             <PrivateAssets>all</PrivateAssets>
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
         </PackageReference>
+
+        <!-- CVE-2026-48109 -->
+        <PackageReference Include="MessagePack" Version="2.5.302" />
     </ItemGroup>
 
     <ItemGroup>

test/WireMock.Net.Extensions.Routing.Tests/WireMock.Net.Extensions.Routing.Tests.csproj

@@ -16,7 +16,7 @@
 
     <ItemGroup>
         <PackageReference Include="AwesomeAssertions" Version="9.4.0" />
-        <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.3.0" />
+        <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.6.0" />
         <PackageReference Include="coverlet.collector" Version="6.0.4">
             <PrivateAssets>all</PrivateAssets>
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>

test/WireMock.Net.Middleware.Tests/WireMock.Net.Middleware.Tests.csproj

@@ -24,7 +24,7 @@
         </PackageReference>
         <PackageReference Include="AwesomeAssertions" Version="9.4.0" />
         <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="8.0.8" />
-        <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.3.0" />
+        <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.6.0" />
         <PackageReference Include="Moq" Version="4.20.72" />
         <PackageReference Include="xunit.v3" Version="3.2.2" />
         <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5">

test/WireMock.Net.Tests.UsingNuGet/WireMock.Net.Tests.UsingNuGet.csproj

@@ -16,7 +16,7 @@
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
         </PackageReference>
         <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.6.0" />
-        <PackageReference Include="WireMock.Net" Version="2.9.0" />
+        <PackageReference Include="WireMock.Net" Version="2.10.0" />
         <PackageReference Include="xunit.v3" Version="3.2.2" />
         <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5">
             <PrivateAssets>all</PrivateAssets>

test/WireMock.Net.Tests/Matchers/JsonPartialWildcardMatcherTests.cs

@@ -416,4 +416,20 @@ public class JsonPartialWildcardMatcherTests
         // Assert 
         Assert.Equal(1.0, match);
     }
-}
+
+    [Fact]
+    public void JsonPartialWildcardMatcher_IsMatch_WithRegexTrue_DateFormat_ShouldMatch()
+    {
+        // Assign
+        var matcher = new JsonPartialWildcardMatcher(
+            new { date = "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?(?:Z|[+-]\\d{2}:\\d{2})$", id = 1 },
+            ignoreCase: false,
+            regex: true);
+
+        // Act
+        var match = matcher.IsMatch("{\"date\":\"2026-06-09T22:23:18.53421+00:00\",\"id\":1}").Score;
+
+        // Assert
+        Assert.Equal(1.0, match);
+    }
+}

test/WireMock.Net.Tests/Matchers/SystemTextJsonPartialWildcardMatcherTests.cs

@@ -366,17 +366,33 @@ public class SystemTextJsonPartialWildcardMatcherTests
         Assert.Equal(1.0, match);
     }
 
-    [Fact]
-    public void SystemTextJsonPartialWildcardMatcher_IsMatch_JsonElement_ShouldMatch()
-    {
-        // Assign
-        var matcher = new SystemTextJsonPartialWildcardMatcher(new { Id = 1, Name = "Test" });
+        [Fact]
+        public void SystemTextJsonPartialWildcardMatcher_IsMatch_JsonElement_ShouldMatch()
+        {
+            // Assign
+            var matcher = new SystemTextJsonPartialWildcardMatcher(new { Id = 1, Name = "Test" });
 
-        // Act
-        var jsonElement = JsonDocument.Parse("{ \"Id\" : 1, \"Name\" : \"Test\", \"Extra\" : \"value\" }").RootElement;
-        var match = matcher.IsMatch(jsonElement).Score;
+            // Act
+            var jsonElement = JsonDocument.Parse("{ \"Id\" : 1, \"Name\" : \"Test\", \"Extra\" : \"value\" }").RootElement;
+            var match = matcher.IsMatch(jsonElement).Score;
 
-        // Assert
-        Assert.Equal(1.0, match);
+            // Assert
+            Assert.Equal(1.0, match);
+        }
+
+        [Fact]
+        public void SystemTextJsonPartialWildcardMatcher_IsMatch_WithRegexTrue_DateFormat_ShouldMatch()
+        {
+            // Assign
+            var matcher = new SystemTextJsonPartialWildcardMatcher(
+                new { date = "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?(?:Z|[+-]\\d{2}:\\d{2})$", id = 1 },
+                ignoreCase: false,
+                regex: true);
+
+            // Act
+            var match = matcher.IsMatch("{\"date\":\"2026-06-09T22:23:18.53421+00:00\",\"id\":1}").Score;
+
+            // Assert
+            Assert.Equal(1.0, match);
+        }
     }
-}

test/WireMock.Net.Tests/WireMock.Net.Tests.csproj

@@ -69,7 +69,7 @@
             <PrivateAssets>all</PrivateAssets>
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
         </PackageReference>
-        <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.3.0" />
+        <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.6.0" />
         <PackageReference Include="coverlet.collector" Version="6.0.4">
             <PrivateAssets>all</PrivateAssets>
             <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>

test/WireMock.Net.Tests/WireMockServerTests.WithBody.cs

@@ -53,6 +53,81 @@ public partial class WireMockServerTests
         response.Should().BeEquivalentTo("{\"first_name\":\"John\",\"last_name\":\"Smith\"}");
     }
 
+    [Fact]
+    public async Task WireMockServer_WithBodyAsJson_WithJsonPartialWildcardMatcher()
+    {
+        // Arrange
+        using var server = WireMockServer.Start(new WireMockServerSettings
+        {
+            Logger = new TestOutputHelperWireMockLogger(testOutputHelper)
+        });
+        server
+            .Given(
+                Request.Create()
+                    .WithPath("/test")
+                    .UsingPost()
+                    .WithBody(new JsonPartialWildcardMatcher(
+                        new
+                        {
+                            date = @"^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$",
+                            id = 1
+                        },
+                        ignoreCase: true,
+                        regex: true
+                    )
+                )
+            )
+            .RespondWith(Response.Create().WithStatusCode(200).WithBody("matched"));
+
+        // Act
+        var requestUri = new Uri($"http://localhost:{server.Port}/test");
+
+        var response = await server.CreateClient().PostAsync(requestUri, new StringContent("{\"date\":\"2026-06-09T22:23:18.53421+00:00\",\"id\":1}"), _ct);
+
+        // Assert
+        response.StatusCode.Should().Be(HttpStatusCode.OK);
+
+        server.Stop();
+    }
+
+    [Fact]
+    public async Task WireMockServer_WithBodyAsJson_WithSystemTextJsonPartialWildcardMatcher()
+    {
+        // Arrange
+        using var server = WireMockServer.Start(new WireMockServerSettings
+        {
+            Logger = new TestOutputHelperWireMockLogger(testOutputHelper),
+            DefaultJsonSerializer = new SystemTextJsonConverter()
+        });
+        server
+            .Given(
+                Request.Create()
+                    .WithPath("/test")
+                    .UsingPost()
+                    .WithBody(new SystemTextJsonPartialWildcardMatcher(
+                        new
+                        {
+                            date = @"^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$",
+                            id = 1
+                        },
+                        ignoreCase: true,
+                        regex: true
+                    )
+                )
+            )
+            .RespondWith(Response.Create().WithStatusCode(200).WithBody("matched"));
+
+        // Act
+        var requestUri = new Uri($"http://localhost:{server.Port}/test");
+
+        var response = await server.CreateClient().PostAsync(requestUri, new StringContent("{\"date\":\"2026-06-09T22:23:18.53421+00:00\",\"id\":1}"), _ct);
+
+        // Assert
+        response.StatusCode.Should().Be(HttpStatusCode.OK);
+
+        server.Stop();
+    }
+
     [Fact]
     public async Task WireMockServer_WithBodyAsJson_Using_PostAsJsonAsync_And_MultipleJmesPathMatchers_ShouldMatch()
     {