Skip to content

Fix S360 open-source vulnerabilities (SFI-ES5.2)#2983

Merged
gavinbarron merged 1 commit into
mainfrom
s360/osv-remediation
Jul 21, 2026
Merged

Fix S360 open-source vulnerabilities (SFI-ES5.2)#2983
gavinbarron merged 1 commit into
mainfrom
s360/osv-remediation

Conversation

@gavinbarron

Copy link
Copy Markdown
Contributor

Summary

  • Bumps System.Security.Cryptography.Xml from 10.0.5 to 10.0.6 for Microsoft.OpenApi.Workbench.
  • Addresses CVE-2026-33116 and CVE-2026-26171.
  • Remediates S360 KPI [SFI-ES5.2] 1ES Open Source Vulnerabilities (Operational).

Validation

  • dotnet restore Microsoft.OpenApi.slnx
  • dotnet build Microsoft.OpenApi.slnx --no-restore
  • dotnet test Microsoft.OpenApi.slnx --no-build

Bump System.Security.Cryptography.Xml from 10.0.5 to 10.0.6 to address CVE-2026-33116 and CVE-2026-26171.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: b925a358-5d34-4537-8327-fe1fa580d903
@gavinbarron
gavinbarron requested a review from a team as a code owner July 20, 2026 23:43
@github-code-quality

Copy link
Copy Markdown

Code Coverage Overview

Languages: C#

C# / code-coverage/dotnet

The overall coverage in commit 9cb14f1 in the s360/osv-remediation branch remains at 89%, unchanged from commit 787b045 in the main branch.

@sonarqubecloud

Copy link
Copy Markdown

@gavinbarron
gavinbarron enabled auto-merge (squash) July 21, 2026 00:50
@gavinbarron
gavinbarron merged commit 8f4a60b into main Jul 21, 2026
19 checks passed
@gavinbarron
gavinbarron deleted the s360/osv-remediation branch July 21, 2026 09:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants