New vulnerability in Microsoft.Build nuget package

Development Pipeline & Plugins
, ,
1

The Microsoft.Build nuget package, which is a dependency of EpicGames.MsBuild, has a newly reported vulnerability https://github.com/advisories/GHSA\-w3q9\-fxm7\-j8fq

There is a new patch version that fixes it, which is 17.11.48. Created a PR for it here https://github.com/EpicGames/UnrealEngine/pull/13931

2

Steps to Reproduce

3

Hello!

Thanks for reporting the problem. Your PR should be useful to other licensees that will run into the problem while we work on a fix for future releases.

Regards,

Martin