FFFF Switch Portable.BouncyCastle/BouncyCastle to BouncyCastle.Cryptography · Issue #1046 · Nethereum/Nethereum · GitHub
[go: up one dir, main page]

Skip to content

Switch Portable.BouncyCastle/BouncyCastle to BouncyCastle.Cryptography #1046

@estara

Description

@estara

Issue tracker is ONLY used for reporting bugs. New features, questions and support should be discussed on our discord channel first. Discord

Please switch from Portable.BouncyCastle/BouncyCastle to BouncyCastle.Cryptography. BouncyCastle is deprecated and has multiple known vulnerabilities. This creates problems for users of Nethereum.Signer who wish to keep their software secure.

Expected Behavior

Deprecated packages with known vulnerabilities should be updated/removed.

Current Behavior

Multiple known vulnerabilities present due to use of deprecated package.

Possible Solution

Switch Portable.BouncyCastle to BouncyCastle.Cryptography >= 2.0.0

Steps to Reproduce

Context (Environment)

Unable to stay compliant with required security updates.

Snyk scan flags vulnerabilities due to the old BouncyCastle.

Detailed Description

Possible Implementation

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0