Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Insecure Extensive use of BinaryFormatter #17

Open
Jab0rnal opened this issue Jun 29, 2022 · 1 comment
Open

Insecure Extensive use of BinaryFormatter #17

Jab0rnal opened this issue Jun 29, 2022 · 1 comment

Comments

@Jab0rnal
Copy link

When attempting to implement this library, I have been getting the following error message:

Exception thrown: 'System.NotSupportedException' in System.Runtime.Serialization.Formatters.dll
BinaryFormatter serialization and deserialization are disabled within this application.

The implementation here is using an unsecure method of binary serialization for serializing event bodies, as described here:

https://docs.microsoft.com/en-gb/dotnet/standard/serialization/binaryformatter-security-guide

A list of "preferred alternatives" are described in the document.

@Jab0rnal Jab0rnal changed the title Extensive use of BinaryFormatter Insecure Extensive use of BinaryFormatter Jun 29, 2022
@kubemq
Copy link
Contributor

kubemq commented Dec 20, 2022

Please check with the latest version v1.6.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants