From 713bbb1a8167b83b4b350ef8fd5d8041eaaee0cf Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 7 Apr 2026 20:38:17 +0000
Subject: [PATCH] Bump Microsoft.AspNetCore.Mvc from 2.0.0 to 2.3.9

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.Mvc
  dependency-version: 2.3.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 TestProject.csproj | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/TestProject.csproj b/TestProject.csproj
index e484c6d..6a4bfb7 100644
--- a/TestProject.csproj
+++ b/TestProject.csproj
@@ -26,7 +26,7 @@
     <!-- CVE-2018-8292: High severity -->
     
     <!-- 5. Microsoft.AspNetCore.Mvc - OLD VERSION -->
-    <PackageReference Include="Microsoft.AspNetCore.Mvc" Version="2.0.0" />
+    <PackageReference Include="Microsoft.AspNetCore.Mvc" Version="2.3.9" />
     <!-- Multiple CVEs -->
 
   </ItemGroup>