Error NU1093: Package 'System.Text.Json' 6.0.9 has a known high severity vulnerability

[cornerbowlsoftware]

I just ran a new WIX build and am now seeing a high vulnerability error thrown on the JSON parser. Not sure how a text parsing algorithm could have any vulnerability which allows a DoS attack, but that aside, its' broken the build.

[cornerbowlsoftware]

For anyone interested in working around this issue without code updates to use a new library, I modified the following project file:

MetadataTask.csproj

<Project Sdk="Microsoft.NET.Sdk">
  <PropertyGroup>
    <TargetFramework>net472</TargetFramework>
    <DebugType>embedded</DebugType>
    <!-- https://github.com/Microsoft/msbuild/issues/2360 -->
    <PlatformTarget>AnyCPU</PlatformTarget>
  </PropertyGroup>

  <ItemGroup>
    <PackageReference Include="Microsoft.Build.Tasks.Core" />
    <PackageReference Include="System.Text.Json" />
    <PackageReference Include="WixToolset.Data" />
  </ItemGroup>
  
  <PropertyGroup>
	<NoWarn>$(NoWarn);NU1903</NoWarn>
  </PropertyGroup>
</Project>