HIGH8.8

GHSA-5mfx-4wcx-rv27

Azure Identity SDK Remote Code Execution Vulnerability

Quick fix

GHSA-5mfx-4wcx-rv27 — Azure.Identity: upgrade to the fixed version with the command below.

dotnet add package Azure.Identity --version 1.10.2

Details

Azure Identity SDK is vulnerable to remote code execution.

Are you affected?

Enter the version of the package you're using.

Affected packages

NuGet/Azure.Identity

Introduced in: 0Fixed in: 1.10.2

Fixdotnet add package Azure.Identity --version 1.10.2

References