Update to newer Newtonsoft or switch to System.Text.json
Author: allenkepler-finastraCreated May 4, 2023Updated Aug 7, 2026
The version of Newtonsoft referenced has known vulnerabilities. Anyone referencing this has to also reference a newer version of Newtonsoft to clear security scans. My solution is Newtonsoft free and I'd rather not add packages for my dev teams to accidentally use. If possible I think it would be better to switch to System.Text.Json or extract serialization in a similar fashion to how database was done.
Thanks
Vulnerability info: https://github.com/advisories/GHSA-5crp-9r3c-p9vr
Source: HangfireIO/Hangfire