-
Notifications
You must be signed in to change notification settings - Fork 3.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update Azure.Identity #33668
Comments
Azure.Identity is a dependency of SqlClient, not of EF; SqlClient 5.1.6 is planned to depend on a new version of Azure.Identity that doesn't have the security issue. Once that's out, EF can update its own dependency on SqlClient. In the meantime, you can simply take a direct dependency on a newer version of Azure.Identity in your csproj. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Resolve alerts on a dependency vulnerability within microsoft.entityframeworkcore.sqlserver --> Azure.Identity v1.10.4
Ref: GHSA-wvxc-855f-jvrv
Upgrade to Azure.Identity version 1.11.0 or higher
The text was updated successfully, but these errors were encountered: