PeterO.Cbor 4.0.0

Details
Advisory: https://github.com/advisories/GHSA-6r92-cgxc-r5fg Severity: high
Additional Details

A security issue was discovered in this version.  Please update this package to use the latest version.

There is a newer version of this package available.
See the version list below for details.
dotnet add package PeterO.Cbor --version 4.0.0                
NuGet\Install-Package PeterO.Cbor -Version 4.0.0                
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package.
<PackageReference Include="PeterO.Cbor" Version="4.0.0" />                
For projects that support PackageReference, copy this XML node into the project file to reference the package.
paket add PeterO.Cbor --version 4.0.0                
#r "nuget: PeterO.Cbor, 4.0.0"                
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package.
// Install PeterO.Cbor as a Cake Addin
#addin nuget:?package=PeterO.Cbor&version=4.0.0

// Install PeterO.Cbor as a Cake Tool
#tool nuget:?package=PeterO.Cbor&version=4.0.0                

A C# implementation of Concise Binary Object Representation (CBOR), a general-purpose binary data format defined in RFC 7049.

Product Compatible and additional computed target framework versions.
.NET net5.0 was computed.  net5.0-windows was computed.  net6.0 was computed.  net6.0-android was computed.  net6.0-ios was computed.  net6.0-maccatalyst was computed.  net6.0-macos was computed.  net6.0-tvos was computed.  net6.0-windows was computed.  net7.0 was computed.  net7.0-android was computed.  net7.0-ios was computed.  net7.0-maccatalyst was computed.  net7.0-macos was computed.  net7.0-tvos was computed.  net7.0-windows was computed.  net8.0 was computed.  net8.0-android was computed.  net8.0-browser was computed.  net8.0-ios was computed.  net8.0-maccatalyst was computed.  net8.0-macos was computed.  net8.0-tvos was computed.  net8.0-windows was computed. 
.NET Core netcoreapp1.0 was computed.  netcoreapp1.1 was computed.  netcoreapp2.0 was computed.  netcoreapp2.1 was computed.  netcoreapp2.2 was computed.  netcoreapp3.0 was computed.  netcoreapp3.1 was computed. 
.NET Standard netstandard1.0 is compatible.  netstandard1.1 was computed.  netstandard1.2 was computed.  netstandard1.3 was computed.  netstandard1.4 was computed.  netstandard1.5 was computed.  netstandard1.6 was computed.  netstandard2.0 was computed.  netstandard2.1 was computed. 
.NET Framework net20 is compatible.  net35 was computed.  net40 is compatible.  net403 was computed.  net45 was computed.  net451 was computed.  net452 was computed.  net46 was computed.  net461 was computed.  net462 was computed.  net463 was computed.  net47 was computed.  net471 was computed.  net472 was computed.  net48 was computed.  net481 was computed. 
MonoAndroid monoandroid was computed. 
MonoMac monomac was computed. 
MonoTouch monotouch was computed. 
Tizen tizen30 was computed.  tizen40 was computed.  tizen60 was computed. 
Universal Windows Platform uap was computed.  uap10.0 was computed. 
Windows Phone wp8 was computed.  wp81 was computed.  wpa81 was computed. 
Windows Store netcore was computed.  netcore45 was computed.  netcore451 was computed. 
Xamarin.iOS xamarinios was computed. 
Xamarin.Mac xamarinmac was computed. 
Xamarin.TVOS xamarintvos was computed. 
Xamarin.WatchOS xamarinwatchos was computed. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages (38)

Showing the top 5 NuGet packages that depend on PeterO.Cbor:

Package Downloads
AWSSDK.DAX.Client

AWS DynamoDB Accelerator (DAX) .NET Client -- DAX is a fully managed, in-memory cache for DynamoDB.

PubnubPCL

PubNub is a Massively Scalable Web Push Service for Web and Mobile Games. This is a cloud-based service for broadcasting messages to thousands of web and mobile clients simultaneously

Pubnub

PubNub is a Massively Scalable Web Push Service for Web and Mobile Games. This is a cloud-based service for broadcasting messages to thousands of web and mobile clients simultaneously

Com.AugustCellars.COSE

An implementation of the CBOR Object Signing and Encryption standards.

DSInternals.Common

This package is shared between all other DSInternals packages. Its main features are Azure AD Graph API and ADSI clients for for retrieval of cryptographic material. It contains implementations of common hash functions used by Windows, including NT hash, LM hash and OrgId hash. It also contains methods for SysKey/BootKey retrieval.

GitHub repositories (6)

Showing the top 5 popular GitHub repositories that depend on PeterO.Cbor:

Repository Stars
MichaelGrafnetter/DSInternals
Directory Services Internals (DSInternals) PowerShell Module and Framework
CICADA8-Research/RemoteKrbRelay
Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework
lithnet/ad-password-protection
Active Directory password filter featuring breached password checking and custom complexity rules
richardschneider/net-ipfs-engine
IPFS Core API implementation in .Net
pubnub/c-sharp
PubNub clients for C-Sharp based languages, including MS Windows C#/.net, Silveright, IIS, and Mono
Version Downloads Last updated
5.0.0-alpha2 3,701 8/15/2024
5.0.0-alpha1 44,974 12/14/2023
4.5.5 21,265 8/15/2024
4.5.3 507,282 12/13/2023
4.5.2 994,499 1/18/2022
4.5.1 35,468 1/17/2022
4.5.0 7,658 12/9/2021 4.5.0 is deprecated; 4.5.0 has at least one vulnerability with high severity.
4.4.4 98,445 7/1/2021 4.4.4 is deprecated; 4.4.4 has at least one vulnerability with high severity.
4.4.2 17,232 5/13/2021 4.4.2 is deprecated; 4.4.2 has at least one vulnerability with high severity.
4.4.1 4,848 4/27/2021 4.4.1 is deprecated; 4.4.1 has at least one vulnerability with high severity.
4.4.0 12,035 4/19/2021 4.4.0 is deprecated; 4.4.0 has at least one vulnerability with high severity.
4.3.0 61,895 12/7/2020 4.3.0 is deprecated; 4.3.0 has at least one vulnerability with high severity.
4.2.0 82,435 7/18/2020 4.2.0 is deprecated; 4.2.0 has at least one vulnerability with high severity.
4.1.3 417,103 5/27/2020 4.1.3 is deprecated; 4.1.3 has at least one vulnerability with high severity.
4.1.2 17,720 4/25/2020 4.1.2 is deprecated; 4.1.2 has at least one vulnerability with high severity.
4.1.1 2,417 4/15/2020 4.1.1 is deprecated; 4.1.1 has at least one vulnerability with high severity.
4.1.0 125,855 12/15/2019 4.1.0 is deprecated; 4.1.0 has at least one vulnerability with high severity.
4.0.0 84,956 9/3/2019 4.0.0 is deprecated; 4.0.0 has at least one vulnerability with high severity.
3.5.2 21,117 7/4/2019 3.5.2 is deprecated because it is no longer maintained; 3.5.2 has at least one vulnerability with high severity.
3.5.1 2,964 7/1/2019 3.5.1 is deprecated because it is no longer maintained; 3.5.1 has at least one vulnerability with high severity.
3.5.0 9,224 6/2/2019 3.5.0 is deprecated because it is no longer maintained; 3.5.0 has at least one vulnerability with high severity.
3.4.0-beta1 1,743 10/1/2018 3.4.0-beta1 is deprecated because it is no longer maintained; 3.4.0-beta1 has at least one vulnerability with high severity.
3.3.0 15,371 9/3/2018 3.3.0 is deprecated because it is no longer maintained; 3.3.0 has at least one vulnerability with high severity.
3.2.0 2,227 7/30/2018 3.2.0 is deprecated because it is no longer maintained; 3.2.0 has at least one vulnerability with high severity.

Version 4.0.0:

- Fix issues with CTAP2 Canonical CBOR form
- Support field serialization and deserialization in ToObject and FromObject

Version 4.0.0-beta2:

The features in this version include:

- The CBOR library no longer stores numbers in a special form beyond the CBOR data model, which represents all "65-bit" signed integers and all "double" values.  This means the CBOR library no longer stores certain numbers as EDecimal, EInteger, EFloat, etc., rather than as tagged CBOR objects.
- CBORObject.CompareTo now compares objects using the default deterministic encoding comparison in the draft revision of the CBOR specification, and no longer treats numbers (objects with the former type CBORType.Number) as a special class.
- CBORType.Number is deprecated; CBORObjects no longer have this type.  In its place, certain numbers now have new CBORTypes Integer or FloatingPoint.
- CBORObject now stores floating-point numbers internally as the bits that make them up, rather than as `double`s, to avoid data loss in conversions.
- Methods were added to CBORObject to read and write floating-point numbers in terms of their bit patterns rather than as `double`s or `float`s.
- Ctap2Canonical was made more strict and now works when decoding CBOR objects.
- Added ReadSequence and DecodeSequence to CBORObject for reading CBOR sequences.
- New CBORNumber class for storing numbers representable in CBOR.  The new CBORObject.IsNumber property checks whether a CBOR object represents a number.
- Bug fixes

Version 4.0.0-beta1:

- Support nullable types in CBORObject.ToObject.
- Update Numbers library to newer version
- JSONOptions.Base64Padding now has no effect.  The library will now write padding as necessary when
 writing traditional base64 to JSON and write no padding when writing base64url to JSON.
- JSONOptions.ReplaceSurrogates property added.
- Restrict valid shared reference indices to integers 0 or greater.
- Reject writing JSON where CBOR maps have two keys with the same string equivalent.
- Improve performance of CBOR object comparisons involving big floats.

Version 4.0.0-alpha2:

- Support CBOR tags for IRIs and IRI references.
- Add CBOREncodeOptions.DefaultCtap2Canonical field.

Version 4.0.0-alpha1:

- Remove all APIs obsoleted since version 3.4.  This
 includes the BigInteger, ExtendedDecimal, and ExtendedFloat APIs,
 which were renamed and moved to a different library, as well as the
 ICBORTag and CBORTypeFilter APIs.
- Changed implementation of FromObject, including imposing a nesting depth
 limit and supporting a CBORTypeMapper parameter.
- Property name conversion rules (in PODOptions) were changed
 in this version with respect to FromObject.  In this sense,
 PODOptions.RemoveIsPrefix was removed.
- Certain other changes in CBOR object reading and validation were
 made; they are largely compatible with previous versions but may be
 backwards-incompatible in certain rare cases