Repository navigation
security: System.Security.Cryptography.Pkcs 9.0.5 - 1 fixable (High) #17
Description
v20261019.1's SBOM has 1 Critical or High vulnerabilities in System.Security.Cryptography.Pkcs 9.0.5 that a newer version fixes.
| CVE | severity | fixed in | EPSS |
|---|---|---|---|
| GHSA-846f-f764-76mx | High | 9.0.21 | 0.77% |
A rule in build/grype.yaml keeps it out of task scan: only Microsoft can rebuild VS Code's vsce-sign; no VS Code release carries one built after the fix. Drop the rule when a release carries the fix.
Activity
scan: name the kept assembly by name, version and type, not by its file
code: 1.143.1