10
Views
1
Comments
[OneSignal Plugin]  Inquiry on Newtonsoft.Json Library Version
Question
onesignal-plugin
Mobile icon
Forge asset by OutSystems
Application Type
Mobile

Hi, 

I’m currently using the Plugin and noticed that it references Newtonsoft.Json version 11.0.0.0. I’d like to check if there are any plans to upgrade this library to a more recent and secure version.

Additionally, I’d appreciate some clarification on whether this version of Newtonsoft.Json is actively being used within the plugin, or if it’s an unused dependency that could potentially be removed. There have been some concerns around vulnerabilities in older versions of Newtonsoft.Json, so understanding this would help assess any associated risks.

Thank you for your support and the great work on this plugin. Looking forward to your response.

Best regards, Nick


2018-05-03 15-18-49
Pedro Gomes
Staff

Hi Nick,

Thank you for raising that concern. We don't have that on the immediate roadmap but if there are security concerns we will surely look into it.

Can you point me to information about those issues?

Thank you

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.