[GHSA-p2fh-w83x-vrm3] In Progress Telerik UI for WPF versions prior to 2024 Q4 ...

[a-shoemaker]

Updates

• Affected products
• Summary

Comments
Provides at least one of the common NuGet package names that this vulnerability comes in.

[JonathanLEvans]

Hi @a-shoemaker, thank you for your contribution. I am having trouble finding Telerik.Windows.Controls.for.Wpf.Xaml in https://www.nuget.org/. Could you provide a link to where I can find it?

[a-shoemaker]

Hi @a-shoemaker, thank you for your contribution. I am having trouble finding Telerik.Windows.Controls.for.Wpf.Xaml in https://www.nuget.org/. Could you provide a link to where I can find it?

I don't believe so as it's not an open source package. See: https://docs.telerik.com/devtools/winforms/visual-studio-integration/install-using-nuget

My personal desire here is to get the Telerik vulnerabilities to pop in Azure DevOps Advanced Security. Not sure if perhaps there is another method for this.

[JonathanLEvans]

Our advisories need to be connected to a package that is in one of the supported ecosystems.