Are there plans to update WireMock.Net to latest .NET 5.0, .NET Core 3.1 or .NET Core 2.1 to fix security vulnerability? #390

Closed
opened 2025-12-29 08:27:18 +01:00 by adam · 3 comments
Owner

Originally created by @jagudelo2us on GitHub (Dec 1, 2021).

Fix install the latest version of .NET 5.0, .NET Core 3.1 or .NET Core 2.1

Currently, you are using
System.Text.Encodings.Web 4.5.0 NVD CVE-2021-26701 and
Microsoft.AspNetCore 2.2.0 NVD CVE-2019-0548 CWE-19 Data Processing Errors

See the following link:
https://github.com/dotnet/announcements/issues/178

Originally created by @jagudelo2us on GitHub (Dec 1, 2021). Fix install the latest version of .NET 5.0, .NET Core 3.1 or .NET Core 2.1 Currently, you are using System.Text.Encodings.Web 4.5.0 NVD CVE-2021-26701 and Microsoft.AspNetCore 2.2.0 NVD CVE-2019-0548 CWE-19 Data Processing Errors See the following link: https://github.com/dotnet/announcements/issues/178
adam added the question label 2025-12-29 08:27:18 +01:00
adam closed this issue 2025-12-29 08:27:18 +01:00
Author
Owner

@StefH commented on GitHub (Dec 1, 2021):

Hello @jagudelo2us,

The System.Text.Encodings.Web is fixed and new NuGet packages will be released today.

About Microsoft.AspNetCore ; I've to review that.

@StefH commented on GitHub (Dec 1, 2021): Hello @jagudelo2us, The `System.Text.Encodings.Web` is fixed and new NuGet packages will be released today. About `Microsoft.AspNetCore` ; I've to review that.
Author
Owner

@jagudelo2us commented on GitHub (Dec 1, 2021):

Hello @jagudelo2us,

The System.Text.Encodings.Web is fixed and new NuGet packages will be released today.

About Microsoft.AspNetCore ; I've to review that.

Still seeing the same vulnerability even with WireMock.Net version 1.4.28. Do a search on your Visual Studio Solution Explorer for System.Text.Encodings.Web and Microsoft.AspNetCore.
See screenshot
SystemTextEncodingsWeb

@jagudelo2us commented on GitHub (Dec 1, 2021): > Hello @jagudelo2us, > > The `System.Text.Encodings.Web` is fixed and new NuGet packages will be released today. > > About `Microsoft.AspNetCore` ; I've to review that. Still seeing the same vulnerability even with WireMock.Net version 1.4.28. Do a search on your Visual Studio Solution Explorer for System.Text.Encodings.Web and Microsoft.AspNetCore. See screenshot ![SystemTextEncodingsWeb](https://user-images.githubusercontent.com/34318214/144323897-2c86cfe6-53f3-4822-a01f-3d2e47aefd3b.PNG)
Author
Owner

@StefH commented on GitHub (Feb 21, 2022):

https://github.com/WireMock-Net/WireMock.Net/pull/728

@StefH commented on GitHub (Feb 21, 2022): https://github.com/WireMock-Net/WireMock.Net/pull/728
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/WireMock.Net#390