Skip to content

fix(security): patch vulnerable crypto fixtures - #2

Merged
KeelMatrix merged 5 commits into
mainfrom
maintenance/efguard-crypto-advisory-2026-10
Oct 18, 2026
Merged

KeelMatrix merged 5 commits into
mainfrom
maintenance/efguard-crypto-advisory-2026-10

Conversation

@KeelMatrix

Copy link
Copy Markdown
Owner

Summary

  • Update both EF10 design fixtures to patched System.Security.Cryptography.Xml 10.0.13.
  • Pin System.Security.Cryptography.Pkcs 9.0.21 in the EF10 fixture to clear the remaining vulnerable transitive resolution.

Validation

  • pwsh ./build/Validate-Dependencies.ps1 passed against current NuGet sources.
  • Full test and CI checks will run on this public pull request.

@KeelMatrix
KeelMatrix merged commit 5cce873 into main Oct 18, 2026
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant