From 85042178698df8602b12bb1d66ea165763a2b265 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 9 Jun 2026 20:35:02 +0000
Subject: [PATCH] Bump Microsoft.AspNetCore.Mvc from 2.0.0 to 2.3.11

---
updated-dependencies:
- dependency-name: Microsoft.AspNetCore.Mvc
  dependency-version: 2.3.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 TestProject.csproj | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/TestProject.csproj b/TestProject.csproj
index e484c6d..2f8c962 100644
--- a/TestProject.csproj
+++ b/TestProject.csproj
@@ -26,7 +26,7 @@
     <!-- CVE-2018-8292: High severity -->
     
     <!-- 5. Microsoft.AspNetCore.Mvc - OLD VERSION -->
-    <PackageReference Include="Microsoft.AspNetCore.Mvc" Version="2.0.0" />
+    <PackageReference Include="Microsoft.AspNetCore.Mvc" Version="2.3.11" />
     <!-- Multiple CVEs -->
 
   </ItemGroup>