mcr.microsoft.com/azure-functions/node:4-node22 - CVE-2024-43485

[idlemind]

The library System.Text.Json version 6.0.9 was detected in Dotnet library manager located at /FuncExtensionBundles/Microsoft.Azure.Functions.ExtensionBundle/4.20.0/bin/function.deps.json and is vulnerable to CVE-2024-43485, which exists in versions >= 6.0.0, <= 6.0.9.

The vulnerability was found in the Github Security Advisory with vendor severity: High (awaiting NVD analysis, CNA severity: High).

The vulnerability can be remediated by updating the library to version 6.0.10 or higher, using dotnet add package System.Text.Json.

[Styxxy]

You are aware .NET 6 is out-of-support? You should really upgrade to at least .NET 8 😉.