[BUG] CVE-2024-43483 Security Vulnerability

[konradgadecki]

Describe the bug

We found security vulnerability of Microsoft.Extensions.Caching.Memory ver 8.0.0 that latest version of FusionCache uses:
CVE-2024-43483, severity is high.

Reference: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43483

version 8.0.1 of Microsoft.Extensions.Caching.Memory fixes it.

To Reproduce

Run any vulnerability scanner like Trivy agains latest version of FusionCache v1.4.0

Expected behavior

Please update Microsoft.Extensions.Caching.Memory to 8.0.1 (or higher if available)

Versions

I've encountered this issue on:

• FusionCache version 1.4.0
• .NET version 8
• OS version N/A

Screenshots

This report comes from Trivy vulnerability scanner:

Additional context

N/A

[jodydonetti]

Thanks! I think it's the same as this already existing PR.
Will merge soon and release a minor version.

[jodydonetti]

Fixed with v1.4.1.
Thanks!