Hi everyone,
We’ve just released NServiceBus.AzureFunctions.Worker.ServiceBus 7.1.1.
Dependency updates
Fixed CVEs
- #795 GitHub Security Advisory ID (GHSA-37gx-xxp4-5rgx)
- #796 GitHub Security Advisory ID (GHSA-w3x6-4m5h-cxqf)
How to know if you are affected
You are affected by #795 and #796 if you are using previous versions of any of these components, but this doesn’t necessarily mean you are vulnerable.
Symptoms
For #795 and #796, NuGet packages in your projects with NuGetAuditMode set to all produce build‑time transitive dependency warnings that mention Particular packages.
When to upgrade
You should upgrade immediately if you are affected. Otherwise, you should upgrade during your next maintenance window.
Where to get it
You can install NServiceBus.AzureFunctions.Worker.ServiceBus 7.1.1 from NuGet.
Please read our release policy for more details.
With thanks,
The team in Particular