Hello,

Describe the issue

Version 2.1.1 of Fare introduces a vulnerability one of the transitive packages, System.Net.Http, from its NETStandard 1.6.1 dependency.

Fare v 2.2.1 or later removes this.

Related links

CVE-2018-8292

Affected products

AutoFixture <= 4.18.1

Tasks

• Issue reported to issue owner (if it comes from a third party library)
• Attached links to GitHub Advisory Database or other authority

More Information

Screenshots

Thanks!