The stale reference is being added to the generated .deps.json that ships in the SDK. This causes false positive for scanners that evaluate the deps.json file. The DLL is not actually present and the correct 8.0.5 version will be resolved from the Microsoft.NetCore.App folder.
|
<SystemTextJsonVersion>8.0.4</SystemTextJsonVersion> |
8.0.1xx branch already has the correct reference. It appears 8.3.x version is shipping in later feature bands of the 8.0 SDK (8.0.3xx and 8.0.4xx).
Updating the reference should help reduce the noise for customers
Customer Impact
For more details, refer to DTS 2426059
The stale reference is being added to the generated .deps.json that ships in the SDK. This causes false positive for scanners that evaluate the deps.json file. The DLL is not actually present and the correct 8.0.5 version will be resolved from the Microsoft.NetCore.App folder.
format/eng/Versions.props
Line 38 in 42ef1d0
8.0.1xx branch already has the correct reference. It appears 8.3.x version is shipping in later feature bands of the 8.0 SDK (8.0.3xx and 8.0.4xx).
Updating the reference should help reduce the noise for customers
Customer Impact
For more details, refer to DTS 2426059