Potential vulnerability - System.Text.Json

Aspose.PDF Product Family
1

Hi Team,

According to Microsoft Security Advisory CVE-2024-43485 | .NET Denial of Service Vulnerability · Issue #329 · dotnet/announcements · GitHub there is a vulnerability in System.Text.Json in versions 8.0.0 to 8.0.4, and Aspose.Pdf for .net core and framework consumes version 8.0.4 - could you please let me know if it could be updated to use newer version?

Thanks

2

@acturisaspose

Can you please share which version of the API are you using? Are you talking about 24.12 version of the API?

3

Hi, I’m using 24.12 on .net framework platform

4

@acturisaspose

We have opened the following new ticket(s) in our internal issue tracking system and will deliver their fixes according to the terms mentioned in Free Support Policies.

Issue ID(s): PDFNET-58999

You can obtain Paid Support Services if you need support on a priority basis, along with the direct access to our Paid Support management team.