#2202·Hangfire

Update to newer Newtonsoft or switch to System.Text.json

Author: allenkepler-finastraCreated May 4, 2023Updated Aug 7, 2026

The version of Newtonsoft referenced has known vulnerabilities. Anyone referencing this has to also reference a newer version of Newtonsoft to clear security scans. My solution is Newtonsoft free and I'd rather not add packages for my dev teams to accidentally use. If possible I think it would be better to switch to System.Text.Json or extract serialization in a similar fashion to how database was done.

Thanks

Vulnerability info: https://github.com/advisories/GHSA-5crp-9r3c-p9vr