Upgrading Microsoft.AspNetCore.Authentication.JwtBearer 3 to 5
Unknown3.1.32 → 5.0.17Security1
SecurityModerate · CVSS 5.5ASP.NET Core Information Disclosure VulnerabilityGHSA-q7cg-43mg-qp69 · CVE-2021-34532 ↗
UnknownUpgrade verdict
DepDelta hasn't looked for this range's notes yet, so breaking changes can't be ruled out.
In plain terms
- DepDelta hasn't finished looking for the notes in this range, so it can't rule out breaking changes yet.
Must act 1 item needs code or config changes
Target frameworks requirement changed in 5.0.6: .NETCoreApp3.1 → net5.0.
Moves microsoft.identitymodel.protocols.openidconnect 5.5.0 → 6.7.1. Your build may pick other versions.
What you must change
Security1
ASP.NET Core Information Disclosure Vulnerability
Moderate · CVSS 5.5API changes
Generated by DepDelta from published .NET assemblies. Not mixed with prose notes.
- added:
property JwtBearerOptions.AutomaticRefreshInterval: TimeSpan { get; set; } - added:
property JwtBearerOptions.MapInboundClaims: bool { get; set; } - added:
property JwtBearerOptions.RefreshInterval: TimeSpan { get; set; }