Skip to content

7.5 CVSS in Microsoft.Bcl.Memory 9.0.4 #7589

Closed
#7703
Closed
7.5 CVSS in Microsoft.Bcl.Memory 9.0.4#7589
#7703
Assignees
matouskozak
Labels
area-InfrastructureBuilds, CI, packaging, and repository tooling
Milestone
ML.NET 6.0

Description

@ArnoZeelmaekers
ArnoZeelmaekers
opened on Mar 12, 2026

Several packages published from this repository like the Microsoft.ML.Tokenizers.*** still use a version that is vulnerable to GHSA-73j8-2gch-69rq . This is causing build errors when validating for security vulnerabilities.

Currently solved this by installing Microsoft.Bcl.Memory 9.0.14 manually in the project

Activity

  1. dotnet-policy-service
    added
    untriagedNew issue has not been triaged
    on Mar 12, 2026

  2. AdamShakhabov commented on Mar 12, 2026

    @AdamShakhabov
    AdamShakhabov
    on Mar 12, 2026

    The same for me.

  3. rosebyte
    added
    area-InfrastructureBuilds, CI, packaging, and repository tooling
    on Sep 8, 2026
  4. matouskozak
    self-assigned this
    on Sep 9, 2026
  5. matouskozak
    removed
    untriagedNew issue has not been triaged
    on Sep 9, 2026
  6. matouskozak
    added this to the ML.NET 6.0 milestone on Sep 9, 2026
  7. matouskozak
    closed this as completedin #7703on Sep 11, 2026
  8. pull
    added a commit that references this issue on Sep 11, 2026

    Avoid Microsoft.Bcl.Memory on modern .NET targets (dotnet#7703)

    e4769bd
  9. github-actions
    locked and limited conversation to collaborators on Oct 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

area-InfrastructureBuilds, CI, packaging, and repository tooling

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions