BlackDuck scan reports vulnerabilities in PCRE2 which is referenced by Microsoft.Azure.Cosmos.ServiceInterop. #4456

Unanswered

abhishekdurvasula asked this question in Q&A

abhishekdurvasula
Apr 26, 2024

I have a couple of questions about this.

What is the version of PCRE2 used by Microsoft.Azure.Cosmos.ServiceInterop.dll? Where can I find the version?
There is a vulnerability reported in v10.40 of PCRE2 which is what is the version used by Microsoft.Azure.Cosmos.ServiceInterop.dll. (According to this issue)

The version of Microsoft.Azure.Cosmos.ServiceInterop.dll is 2.14.0.0.
The version of Microsoft.Azure.Cosmos NuGet is 3.39.1

Any suggestions would be helpful.

Replies: 0 comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment